xlsx

Pass

Audited by Gen Agent Trust Hub on Jul 10, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The recalc.py script executes the soffice command and timeout utilities via subprocess.run. This is necessary for automating formula recalculations within Excel workbooks using LibreOffice. The script also creates a local macro file to facilitate this process, which is a legitimate use of dynamic execution for task automation.
  • [EXTERNAL_DOWNLOADS]: The skill depends on established Python packages pandas and openpyxl for reading, writing, and analyzing spreadsheet data.
  • [PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection.
    • Ingestion points: Spreadsheets are read using pandas.read_excel and openpyxl.load_workbook as documented in SKILL.md.
    • Boundary markers: Absent.
    • Capability inventory: recalc.py performs shell command execution.
    • Sanitization: Absent. This is categorized as a surface risk with no evidence of active exploitation.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 10, 2026, 10:43 AM
Security Audit — agent-trust-hub — xlsx