spreadsheet

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill instructions and associated Python scripts focus on legitimate spreadsheet management tasks. The dependencies suggested (openpyxl, pandas, matplotlib) are well-known and widely used in the data science community.
  • [COMMAND_EXECUTION]: The skill documentation describes the use of standard system utilities like libreoffice (soffice) and poppler-utils (pdftoppm) for converting spreadsheets to images for visual verification. These operations are restricted to the intended purpose of the skill.
  • [PRIVILEGE_ESCALATION]: The documentation includes sudo apt-get commands for installing necessary system dependencies. This is standard procedure for environment setup and does not constitute an unauthorized privilege escalation attempt.
  • [INDIRECT_PROMPT_INJECTION]: The skill involves processing external data files (spreadsheets), which represents a potential surface for indirect prompt injection. However, the instructions emphasize using structured libraries like pandas and openpyxl to handle the data, which inherently provides a layer of isolation between the data and the agent's control logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 12:17 AM