officecli-data-pipeline
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized exfiltration attempts were detected in the instructions or example code.
- [EXTERNAL_DOWNLOADS]: The skill references an external dependency,
officecli, and points to the author's official GitHub repository (https://github.com/lidge-jun/OfficeCLI) for installation. This is a legitimate vendor resource and the skill includes an 'install consent contract' to ensure the user is prompted before any installation occurs. - [COMMAND_EXECUTION]: The skill provides examples of using the
officeclicommand-line tool to import data, apply styles, and validate Excel workbooks. These are standard operations for the tool's intended purpose. - [DATA_EXFILTRATION]: The workflow focuses on local data processing (CSV/TSV to Excel). There are no network requests or patterns indicating unauthorized data transmission.
- [DYNAMIC_EXECUTION]: The skill uses a standard
python3 -ccall to generate sample data for a demonstration script, which is a benign use of inline script execution.
Audit Metadata