easyexcel-fill
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a collection of educational resources and Java code snippets. It does not contain any executable scripts (such as shell, Python, or JavaScript) that would run automatically in the agent's environment.
- [EXTERNAL_DOWNLOADS]: The skill references official documentation and repositories from Alibaba (e.g., easyexcel.opensource.alibaba.com and github.com/alibaba/easyexcel). These are well-known and trusted technology sources used for legitimate development purposes.
- [COMMAND_EXECUTION]: No unauthorized or suspicious command execution patterns were found. The code snippets provided are standard Java implementation examples for the EasyExcel library and do not include dangerous operations like shell spawning or arbitrary code evaluation.
- [PROMPT_INJECTION]: The skill outlines a data processing flow (Java data objects into Excel templates). While this represents a theoretical surface for indirect prompt injection if an agent were to later interpret the generated Excel content as instructions, the skill provides standard implementation patterns with no evidence of malicious intent or behavior.
- Ingestion points: Java DTOs, Map objects, and .xlsx template files provided by the user or application context.
- Boundary markers: None mentioned.
- Capability inventory: File system writes and stream output via the EasyExcel library.
- Sanitization: The examples demonstrate standard library usage without explicit input validation, which is typical for documentation of this nature.
Audit Metadata