easyexcel-patterns
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security risks detected. The skill is purely educational, providing best practices for the EasyExcel library.
- [EXTERNAL_DOWNLOADS]: The skill references the official GitHub repository (
github.com/alibaba/easyexcel) and documentation website for Alibaba's EasyExcel project. These are well-known and reputable resources for Java developers. - [PROMPT_INJECTION]: Analysis of instructions revealed no attempts to override agent behavior, bypass safety filters, or extract system prompts.
- [DATA_EXFILTRATION]: No unauthorized data collection or exfiltration patterns were found. The code examples demonstrate standard use of
HttpServletResponse.getOutputStream()for web-based file downloads and local file writing for reports. - [COMMAND_EXECUTION]: The provided code snippets are Java implementation patterns and do not contain arbitrary shell command execution or unsafe subprocess calls.
- [INDIRECT_PROMPT_INJECTION]: While the skill teaches how to ingest external Excel data, it is presented as standard library documentation. No specific vulnerabilities related to processing untrusted data into instructions were detected.
- Ingestion points: Excel file reading via
EasyExcel.read()inSKILL.md. - Boundary markers: Not applicable to these code snippets.
- Capability inventory: File read/write and network stream output.
- Sanitization: Not present in the snippets as they focus on library usage patterns rather than data validation.
Audit Metadata