xlsx

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The recalc.py script uses subprocess.run to invoke the soffice (LibreOffice) binary and system utilities like timeout or gtimeout to automate the calculation of Excel formulas.
  • [DYNAMIC_EXECUTION]: The script recalc.py dynamically generates a StarBasic macro and writes it to the user's local LibreOffice configuration directory, then triggers the execution of this macro via the soffice command-line interface.
  • [PERSISTENCE]: The skill modifies the local LibreOffice environment by adding a persistent macro to the application's configuration, which remains on the system across sessions.
  • [INDIRECT_PROMPT_INJECTION]: The skill handles untrusted external data in the form of Excel and CSV files, providing a surface for potential indirect prompt injection attacks. (1) Ingestion points: Data is loaded using pd.read_excel in documentation and load_workbook in recalc.py. (2) Boundary markers: No delimiters or explicit instructions are provided to distinguish between data and potential commands within the spreadsheets. (3) Capability inventory: The skill possesses the ability to execute system commands via subprocess.run and perform file system operations. (4) Sanitization: The implementation focuses on verifying formula errors but does not include sanitization logic for textual content.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 06:53 PM