univer-node-backend
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses official @univerjs and @univerjs-pro packages for its core functionality. These are documented vendor resources from dream-num and do not present a supply chain risk in this context.
- [SAFE]: Code examples demonstrate standard Node.js practices for spreadsheet automation, including local file system operations (fs.readFileSync and fs.writeFileSync) for reading and saving workbook data.
- [SAFE]: The use of child_process.fork for worker processes is a standard performance optimization for offloading formula execution in Node.js and is used here in a benign, documented manner.
- [SAFE]: No malicious patterns such as prompt injection, credential harvesting, or obfuscated code were detected. Network operations, including WebSocket collaboration and XLSX importing, are part of the intended product functionality.
Audit Metadata