easyexcel-read
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides legitimate instructions and code snippets for integrating the Alibaba EasyExcel library into Java applications. The patterns shown (e.g., using listeners for streaming) are industry best practices for handling large Excel files.
- [SAFE]: External references are restricted to official project documentation and repositories, including the Alibaba EasyExcel documentation and GitHub repositories. No evidence of obfuscation or credential exposure was found.
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest and process untrusted external data from Excel files, creating a standard data processing attack surface. 1. Ingestion points: Data enters through MultipartFile and InputStream in examples/web/19-multipart-upload.md and references/scenarios/business-scenarios.md. 2. Boundary markers: Not applicable for the provided Java implementation code. 3. Capability inventory: The skill demonstrates data persistence (database writes via DAO) and logging. 4. Sanitization: Relies on the library's internal parsing and optional business-layer validation logic provided in the examples.
Audit Metadata