OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn4 providerslatest audit Apr 15, 2026
Independent checks from skills.sh's audit partners.
The skill provides comprehensive tools for spreadsheet manipulation and formula recalculation using LibreOffice. It includes a sophisticated compatibility feature that performs runtime compilation of an embedded C shim and injects it into the LibreOffice process via LD_PRELOAD to bypass environment-specific socket restrictions. While intended for operation in restricted VM environments, the use of runtime code generation and process injection represents a high-risk pattern. Additionally, the skill's ingestion of unsanitized spreadsheet data creates a surface for indirect prompt injection.
Detected behaviors
No alerts
No issues
Score: 93/100 · 2 sections analyzed