xlsx
Warn
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
recalc.pyscript utilizessubprocess.runto executesoffice(LibreOffice) for the purpose of recalculating Excel formulas. It also programmatically calls system utilities liketimeoutorgtimeoutdepending on the host operating system. - [DYNAMIC_EXECUTION]: The skill performs runtime script generation by writing a StarBasic macro file (
Module1.xba) to the local filesystem (e.g.,~/.config/libreoffice/...or~/Library/Application Support/LibreOffice/...). This macro is then dynamically loaded and executed by LibreOffice to automate workbook operations. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external data from Excel, CSV, and TSV files. The lack of explicit boundary markers or sanitization when reading these files into the agent's context creates a surface for indirect prompt injection, where malicious instructions embedded in spreadsheet cells could influence the agent's subsequent actions.
Audit Metadata