xlsx
Pass
Audited by Gen Agent Trust Hub on Apr 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
recalc.pyscript invokes the LibreOfficesofficebinary to recalculate spreadsheet formulas. This is performed usingsubprocess.runwith a list of arguments, a practice that correctly mitigates the risk of shell command injection from user-provided filenames. Additionally, the script automatically manages a StarBasic macro within the local LibreOffice configuration directory to facilitate the calculation process. - [EXTERNAL_DOWNLOADS]: The skill instructions and troubleshooting guides reference standard, well-known Python packages including
pandas,openpyxl,xlrd, andxlcalcfor robust spreadsheet processing. - [PROMPT_INJECTION]: The skill processes untrusted data from external spreadsheet files, establishing a surface for indirect prompt injection attacks.
- Ingestion points: Data enters the agent's context via
pd.read_excel()andload_workbook()calls as documented inSKILL.mdand the reference materials. - Boundary markers: No specific delimiters or instructions to ignore embedded instructions are used when reading data from cell ranges.
- Capability inventory: The skill possesses the capability to write files to the system and execute local commands through the formula recalculation script.
- Sanitization: Spreadsheet content is ingested using standard library methods without additional validation or sanitization of cell values.
Audit Metadata