xlsx

Pass

Audited by Gen Agent Trust Hub on Jun 24, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The recalc.py script executes the soffice (LibreOffice) command to automate formula recalculation. It uses subprocess.run to manage the lifecycle of the spreadsheet calculation process.
  • Evidence: The script constructs command lines like ['soffice', '--headless', ...], and handles OS-specific timeout utilities (timeout on Linux, gtimeout on macOS). This is a functional requirement for the skill's purpose of ensuring spreadsheet accuracy.
  • [REMOTE_CODE_EXECUTION]: While the skill uses external software (LibreOffice), it does not download code from arbitrary or untrusted remote sources. It assumes a local installation of the office suite.
  • [SAFE]: The skill instructions and scripts are consistent with its stated purpose of spreadsheet management. It follows best practices for secret management by not including hardcoded credentials and provides clear documentation on handling Excel errors. The dependencies (pandas, openpyxl) are standard, well-known libraries for data processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 24, 2026, 06:15 PM
Security Audit — agent-trust-hub — xlsx