xlsx
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
recalc.pyscript executes thesoffice(LibreOffice) binary viasubprocess.runto perform formula recalculation on spreadsheet files. This is a core feature of the skill but involves interaction with the host operating system's command line. - [DYNAMIC_EXECUTION]: The
recalc.pyscript dynamically generates a LibreOffice Basic macro (Module1.xba) and writes it to the user's local application configuration directory (e.g.,~/.config/libreoffice) to automate the recalculation and saving of workbooks. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to read and process external data from Excel and CSV files, creating a surface for indirect prompt injection attacks where instructions embedded in cell content could potentially influence agent behavior.
- Ingestion points: The skill reads data from
.xlsx,.xlsm,.csv, and.tsvfiles usingpandas.read_excel()andopenpyxl.load_workbook(). - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the processing logic.
- Capability inventory: The skill possesses file write capabilities via
openpyxland command execution capabilities viasoffice. - Sanitization: There is no evidence of sanitization, filtering, or validation of cell contents before they are processed by the agent.
Audit Metadata