Context-Inappropriate Capability
Medium
- Confidence
- 84% confidence
- Finding
- The skill description frames this as local RAG indexing, but indexing Office documents causes execution of an external LibreOffice binary on attacker-controlled files. That expands the trust boundary and can expose the host to parser/macro/converter vulnerabilities in LibreOffice or unexpected behavior during document conversion.
