xlsx
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The recalc.py script executes the soffice (LibreOffice) binary to perform formula recalculation using the subprocess.run method.
- [DYNAMIC_EXECUTION]: The skill dynamically generates a StarBasic macro and saves it to the local LibreOffice configuration directory to enable formula updates. This is a standard procedure for headless spreadsheet recalculation.
- [INDIRECT_PROMPT_INJECTION]: The skill processes spreadsheet files which may contain untrusted data. 1. Ingestion points: The skill reads xlsx, csv, and tsv files using pandas and openpyxl. 2. Boundary markers: Absent. 3. Capability inventory: The skill has file-write capabilities and shell execution capabilities through the recalc.py script. 4. Sanitization: Absent.
Audit Metadata