xlsx

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The recalc.py script executes the soffice (LibreOffice) binary via subprocess.run to perform formula recalculation on spreadsheet files. This is a core feature of the skill but involves interaction with the host operating system's command line.
  • [DYNAMIC_EXECUTION]: The recalc.py script dynamically generates a LibreOffice Basic macro (Module1.xba) and writes it to the user's local application configuration directory (e.g., ~/.config/libreoffice) to automate the recalculation and saving of workbooks.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to read and process external data from Excel and CSV files, creating a surface for indirect prompt injection attacks where instructions embedded in cell content could potentially influence agent behavior.
  • Ingestion points: The skill reads data from .xlsx, .xlsm, .csv, and .tsv files using pandas.read_excel() and openpyxl.load_workbook().
  • Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the processing logic.
  • Capability inventory: The skill possesses file write capabilities via openpyxl and command execution capabilities via soffice.
  • Sanitization: There is no evidence of sanitization, filtering, or validation of cell contents before they are processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 03:42 PM