lbo-model
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes instructions to execute a specific Python script to validate Excel formulas.
- Evidence:
python /mnt/skills/public/xlsx/recalc.py model.xlsxin SKILL.md. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied Excel templates and assumptions, creating a potential vector for indirect instructions.
- Ingestion points:
examples/LBO_Model.xlsxand user-provided template files. - Boundary markers: Absent; there are no instructions to differentiate data from commands within the processed files.
- Capability inventory: The agent can modify Excel workbooks and execute a local Python utility script.
- Sanitization: Absent; the skill does not specify procedures for cleaning or validating ingested template data.
Audit Metadata