xlsx
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends the installation of a forked version of the
OfficeCLItool from the author's public repository (https://github.com/lidge-jun/OfficeCLI). This process is gated by an explicit user consent requirement to ensure the user is aware of the external dependency. - [COMMAND_EXECUTION]: The skill executes various shell commands to perform workbook operations, including
officeclifor structural edits,soffice(LibreOffice) for PDF generation and formula recalculation, and several local Python utility scripts (xlsx_cli.py,recalc.py) for audit and maintenance tasks. - [PROMPT_INJECTION]: As the skill ingests and processes external Excel and CSV files, it is theoretically susceptible to indirect prompt injection. To mitigate this risk, the instructions mandate a comprehensive verification and QA process, including structural validation and manual error scans, to ensure that only intended data is processed and reflected in the final output.
Audit Metadata