xlsx

Pass

Audited by Gen Agent Trust Hub on Nov 5, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The recalc.py script uses subprocess.run to invoke soffice (LibreOffice) in headless mode. This is the primary mechanism for recalculating formulas in files created via openpyxl, as the library itself does not have a calculation engine. The implementation correctly handles absolute paths and includes platform-specific timeout handling (using timeout on Linux and gtimeout on macOS if available). While this involves shell execution, it is limited to a specific, legitimate tool required for the skill's stated purpose.
  • [SAFE]: The skill uses industry-standard libraries (pandas, openpyxl) and follows best practices for Excel management, such as using formulas instead of hardcoded values and providing a verification loop for formula errors. The inclusion of an explicit LICENSE.txt file from the vendor confirms the source and intended use.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 5, 2026, 06:22 AM