skills/jjyaoao/helloagents/xlsx/Gen Agent Trust Hub

xlsx

Warn

Audited by Gen Agent Trust Hub on Oct 16, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The recalc.py script utilizes subprocess.run to execute soffice (LibreOffice) for the purpose of recalculating Excel formulas. It also programmatically calls system utilities like timeout or gtimeout depending on the host operating system.
  • [DYNAMIC_EXECUTION]: The skill performs runtime script generation by writing a StarBasic macro file (Module1.xba) to the local filesystem (e.g., ~/.config/libreoffice/... or ~/Library/Application Support/LibreOffice/...). This macro is then dynamically loaded and executed by LibreOffice to automate workbook operations.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external data from Excel, CSV, and TSV files. The lack of explicit boundary markers or sanitization when reading these files into the agent's context creates a surface for indirect prompt injection, where malicious instructions embedded in spreadsheet cells could influence the agent's subsequent actions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 16, 2026, 11:56 PM