spreadsheet
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions and associated Python scripts focus on legitimate spreadsheet management tasks. The dependencies suggested (openpyxl, pandas, matplotlib) are well-known and widely used in the data science community.
- [COMMAND_EXECUTION]: The skill documentation describes the use of standard system utilities like
libreoffice(soffice) andpoppler-utils(pdftoppm) for converting spreadsheets to images for visual verification. These operations are restricted to the intended purpose of the skill. - [PRIVILEGE_ESCALATION]: The documentation includes
sudo apt-getcommands for installing necessary system dependencies. This is standard procedure for environment setup and does not constitute an unauthorized privilege escalation attempt. - [INDIRECT_PROMPT_INJECTION]: The skill involves processing external data files (spreadsheets), which represents a potential surface for indirect prompt injection. However, the instructions emphasize using structured libraries like
pandasandopenpyxlto handle the data, which inherently provides a layer of isolation between the data and the agent's control logic.
Audit Metadata