doc-writing
Warn
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDYNAMIC_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
resources/recalc.pyusessubprocess.runto execute system commands including the LibreOfficesofficebinary and system timeout utilities liketimeoutandgtimeout.- [DYNAMIC_EXECUTION]: Theresources/recalc.pyscript dynamically generates a StarBasic macro file (Module1.xba) and then triggers its execution within the LibreOffice environment using thesofficecommand-line interface.- [PERSISTENCE]: Theresources/recalc.pyscript modifies the user's LibreOffice application configuration directory (e.g.,~/.config/libreoffice/or~/Library/Application Support/LibreOffice/) to install a custom macro that persists across application sessions.- [INDIRECT_PROMPT_INJECTION]: The skill processes external document files such as XLSX and DOCX which may contain malicious instructions that could influence the agent's behavior. - Ingestion points: The
resources/recalc.pyscript reads Excel files, and the skill documentation covers processing of PDF, DOCX, XLSX, and PPTX formats. - Boundary markers: The instructions lack specific delimiters or warnings for the agent to ignore instructions found within external files.
- Capability inventory: The skill provides access to subprocess execution and file system write operations.
- Sanitization: Content extracted from documents is not sanitized or validated before being used in the agent's context.- [EXTERNAL_DOWNLOADS]: The
resources/docx-js.mdfile contains instructions for installing thedocxpackage vianpm. This refers to a well-known third-party library for document generation.
Audit Metadata