tabular-review

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • Dependency Installation: The skill may request the installation of common Python packages (openpyxl, google-api-python-client) to support its spreadsheet output features.
  • Indirect Prompt Injection Surface: This skill is designed to ingest and process external documents, such as contracts and diligence files, which are inherently untrusted data sources. * Ingestion points: Contracts and legal documents are read from local storage, Google Drive, or VDR paths. * Capability inventory: The skill possesses file-writing capabilities (Excel, CSV, YAML) and can interact with the Google Sheets API. * Sanitization: The skill explicitly implements a formula injection defense by prefixing external text with a single quote, effectively mitigating risks associated with opening generated spreadsheets in applications like Excel or Google Sheets.
  • Command Execution: The skill utilizes shell commands to verify the presence of and install necessary Python dependencies for document processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 07:00 PM