docx
Warn
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The script
scripts/office/soffice.pycontains hardcoded C source code (_SHIM_SOURCE) designed to intercept and redirect system calls related to networking. At runtime, the skill writes this source to a temporary file, compiles it into a shared library usinggcc, and then injects it into the LibreOffice process using theLD_PRELOADenvironment variable. This is a highly technical mechanism used to shimsocket,listen,accept,close, andreadcalls. - [DYNAMIC_EXECUTION]: The script
scripts/accept_changes.pydynamically generates a LibreOffice Basic macro (AcceptAllTrackedChanges) and installs it into a temporary user profile directory (Module1.xba). This macro is then executed by LibreOffice to automate document processing. - [COMMAND_EXECUTION]: The skill makes extensive use of the
subprocessmodule to execute external system tools. These includesoffice(LibreOffice),gcc(compiler),git(for diffing), andpdftoppm(Poppler). - [INDIRECT_PROMPT_INJECTION]: The skill operates on untrusted Word documents provided by external parties. While it implements basic defensive measures, such as stripping symlinks from unpacked archives (
find unpacked -type l -delete), it relies on the safety of complex external engines like Pandoc and LibreOffice to process these files.
Audit Metadata