spreadsheet
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends the installation of standard libraries including openpyxl, pandas, and matplotlib, as well as system tools like LibreOffice and Poppler-utils. These are all well-known and trusted packages.
- [COMMAND_EXECUTION]: Instructions in SKILL.md guide the agent to perform spreadsheet rendering to PDF or PNG formats using shell commands for LibreOffice (soffice) and Poppler (pdftoppm). This is a legitimate functional requirement for visual verification of layouts.
- [PRIVILEGE_ESCALATION]: The installation documentation includes a sudo apt-get command for system dependencies on Linux. This represents standard environment setup rather than a malicious attempt at runtime privilege escalation.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external tabular data files (.xlsx, .csv, .tsv), which constitutes a potential surface for indirect prompt injection attacks. 1. Ingestion points: The skill reads external data using pandas and openpyxl libraries as specified in the workflow. 2. Boundary markers: There are no instructions to use delimiters or ignore embedded instructions within spreadsheet cells. 3. Capability inventory: The skill has the capability to write files and execute specific rendering commands on the system. 4. Sanitization: No explicit content validation or sanitization rules are defined for the data extracted from the spreadsheets.
Audit Metadata