Lead Qualification
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted external data from spreadsheets using the
office-mcptools. - Ingestion points: Data is ingested through the
read_xlsxandanalyze_spreadsheettools referenced in the SKILL.md metadata. - Boundary markers: The skill lacks explicit instructions or delimiters to isolate processed spreadsheet data from the agent's core instructions, potentially allowing embedded text to influence agent behavior.
- Capability inventory: The skill has the ability to write data via the
create_xlsxtool. It does not have network access or shell execution capabilities. - Sanitization: No specific sanitization or validation logic is defined for the content extracted from spreadsheets.
Audit Metadata