xlsx
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The
recalc.pyscript usessubprocess.runto callsoffice(LibreOffice) and system timeout utilities. These calls are used to recalculate spreadsheet formulas in a headless environment and are executed using list-based arguments, which prevents shell injection. - [DYNAMIC_EXECUTION]: To enable automated recalculation,
recalc.pygenerates a static LibreOffice Basic macro file and stores it in the user's LibreOffice configuration directory. This is a legitimate implementation detail required to automate the 'Calculate All' and 'Store' functions in LibreOffice. The generated macro is restricted to these functions and does not incorporate user-supplied code. - [EXTERNAL_DOWNLOADS]: The skill mentions a dependency on an external script located in
.claude/skills/project-diagrams. This refers to a local skill within the environment rather than a remote download from an untrusted source.
Audit Metadata