xlsx
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The helper script
recalc.pyexecutes thesoffice(LibreOffice) binary and thegtimeoututility usingsubprocess.run. The commands are constructed using argument lists rather than shell strings, which follows safe implementation practices to prevent command injection. - [DYNAMIC_EXECUTION]: The skill performs runtime configuration by writing a StarBasic macro file (
Module1.xba) to the user's LibreOffice configuration directory (~/.config/libreoffice/or~/Library/Application Support/LibreOffice/). This macro is generated from a hardcoded template to automate the recalculation and saving of workbooks. - [INDIRECT_PROMPT_INJECTION]: The skill processes external spreadsheet files, creating a vector for indirect instructions embedded in data.
- Ingestion points: Untrusted spreadsheet data is read into the agent context via
pd.read_excel()andload_workbook()as demonstrated in the skill instructions. - Boundary markers: The instructions do not implement explicit delimiters or instructions to the agent to disregard potential instructions within cell content.
- Capability inventory: The skill grants the agent capabilities to write to the file system and execute shell commands through the
recalc.pyscript. - Sanitization: No data validation or sanitization routines are specified for handling cell contents before they are used in further logic or outputs.
Audit Metadata