skills/lidge-jun/cli-jaw-skills/xlsx/Gen Agent Trust Hub

xlsx

Pass

Audited by Gen Agent Trust Hub on Jul 2, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends the installation of a forked version of the OfficeCLI tool from the author's public repository (https://github.com/lidge-jun/OfficeCLI). This process is gated by an explicit user consent requirement to ensure the user is aware of the external dependency.
  • [COMMAND_EXECUTION]: The skill executes various shell commands to perform workbook operations, including officecli for structural edits, soffice (LibreOffice) for PDF generation and formula recalculation, and several local Python utility scripts (xlsx_cli.py, recalc.py) for audit and maintenance tasks.
  • [PROMPT_INJECTION]: As the skill ingests and processes external Excel and CSV files, it is theoretically susceptible to indirect prompt injection. To mitigate this risk, the instructions mandate a comprehensive verification and QA process, including structural validation and manual error scans, to ensure that only intended data is processed and reflected in the final output.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 2, 2026, 01:53 PM