xlsx-custom
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/recalc.pyinvokes thesofficeorlibreofficebinary usingsubprocess.run()to recalculate spreadsheet formulas in headless mode. - [COMMAND_EXECUTION]: The
scripts/recalc.pyscript usesimportlibto dynamically load and execute a Python module from a path computed at runtime (office-custom/scripts/soffice.py), which involves dynamic execution of code from computed filesystem paths. - [PROMPT_INJECTION]: The skill processes untrusted spreadsheet data and possesses capabilities to write files and execute system commands, presenting a surface for indirect prompt injection.
- Ingestion points: Files loaded via
pandas.read_excel()andopenpyxl.load_workbook()as described inSKILL.mdandscripts/recalc.py. - Boundary markers: None identified in the skill instructions or scripts.
- Capability inventory: File writing (
wb.save,df.to_excel), complex data manipulation (pandas), and system command execution (sofficeviarecalc.py). - Sanitization: No validation or sanitization of data extracted from spreadsheet cells is implemented before further processing.
Audit Metadata