xlsx
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
recalc.pyscript executes thesoffice(LibreOffice) binary usingsubprocess.runto perform formula recalculation in a headless environment. This is a functional requirement for updating spreadsheet values without user interaction. - [DYNAMIC_EXECUTION]: The
recalc.pyscript generates a LibreOffice Basic macro (Module1.xba) and writes it to the user's application configuration directory (e.g.,~/.config/libreoffice/or~/Library/Application Support/LibreOffice/). This macro is used to automate the 'calculate all' and 'save' commands within the spreadsheet application. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data from Excel, CSV, and TSV files using libraries like
pandasandopenpyxl. - Ingestion points: Data enters the agent's context through
pd.read_excel()andload_workbook()calls documented inSKILL.md. - Boundary markers: The skill does not explicitly define delimiters for untrusted data in its examples.
- Capability inventory: The skill has capabilities to write to the filesystem (macro configuration) and execute system binaries (
soffice). - Sanitization: The
recalc.pyscript performs post-calculation verification by scanning for Excel formula errors (e.g.,#REF!,#DIV/0!), providing a basic level of integrity checking for the processed data.
Audit Metadata