yy-read-xlsx
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The core functionality is implemented in a Python script (
read_xlsx.py) that uses only the Python standard library (zipfileandxml.etree.ElementTree) to process Office Open XML files. This approach minimizes the security surface area by avoiding external dependencies. - [COMMAND_EXECUTION]: The skill instructs the agent to execute a local Python script to process user-provided files. The script includes security checks such as validating file extensions (
.xlsx) and preventing path traversal attacks when resolving internal XML component paths within the archive structure. - [EXTERNAL_DOWNLOADS]: The
package.jsonandpyproject.tomlfiles include standard development tools such asruff,pyright, andmarkdownlint-cli2. These are used for code quality and testing and are not invoked during the normal execution of the skill's primary task.
Audit Metadata