excel-variance-analyzer
Pass
Audited by Gen Agent Trust Hub on Jul 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions are strictly focused on financial analysis and data processing. No patterns of prompt injection, data exfiltration, or obfuscation were detected.
- [EXTERNAL_DOWNLOADS]: The skill references the
@negokaz/excel-mcp-serverpackage in its prerequisites. This is a standard dependency for providing the Excel manipulation capabilities required for the skill's stated purpose. - [COMMAND_EXECUTION]: The skill utilizes restricted Bash access (
npx:*) to interact with the Excel MCP server. No arbitrary or dangerous shell commands are present in the instructions. - [DATA_EXPOSURE]: While the skill handles sensitive financial data, it does so within the local agent environment and the specified Excel tools. It includes a validation step (Step 2) that checks if data is numeric, which serves as a security best practice when processing user-provided financial inputs.
Audit Metadata