xlsx
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The
recalc.pyscript executes thesofficecommand andtimeoututilities viasubprocess.run. This is necessary for automating formula recalculations within Excel workbooks using LibreOffice. The script also creates a local macro file to facilitate this process, which is a legitimate use of dynamic execution for task automation. - [EXTERNAL_DOWNLOADS]: The skill depends on established Python packages
pandasandopenpyxlfor reading, writing, and analyzing spreadsheet data. - [PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection.
- Ingestion points: Spreadsheets are read using
pandas.read_excelandopenpyxl.load_workbookas documented inSKILL.md. - Boundary markers: Absent.
- Capability inventory:
recalc.pyperforms shell command execution. - Sanitization: Absent. This is categorized as a surface risk with no evidence of active exploitation.
- Ingestion points: Spreadsheets are read using
Audit Metadata