docx

Warn

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: MEDIUMDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [DYNAMIC_EXECUTION]: The script scripts/office/soffice.py contains hardcoded C source code (_SHIM_SOURCE) designed to intercept and redirect system calls related to networking. At runtime, the skill writes this source to a temporary file, compiles it into a shared library using gcc, and then injects it into the LibreOffice process using the LD_PRELOAD environment variable. This is a highly technical mechanism used to shim socket, listen, accept, close, and read calls.
  • [DYNAMIC_EXECUTION]: The script scripts/accept_changes.py dynamically generates a LibreOffice Basic macro (AcceptAllTrackedChanges) and installs it into a temporary user profile directory (Module1.xba). This macro is then executed by LibreOffice to automate document processing.
  • [COMMAND_EXECUTION]: The skill makes extensive use of the subprocess module to execute external system tools. These include soffice (LibreOffice), gcc (compiler), git (for diffing), and pdftoppm (Poppler).
  • [INDIRECT_PROMPT_INJECTION]: The skill operates on untrusted Word documents provided by external parties. While it implements basic defensive measures, such as stripping symlinks from unpacked archives (find unpacked -type l -delete), it relies on the safety of complex external engines like Pandoc and LibreOffice to process these files.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 15, 2026, 01:53 AM