add-excel

Pass

Audited by Gen Agent Trust Hub on Nov 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • Command Execution: The skill utilizes the Bash tool to run project-related commands such as the Power Apps CLI (pa) and the Node package manager (npm). These operations are used to register data sources and compile the project, which is consistent with its stated purpose of managing application connectors.
  • Indirect Prompt Injection: There is a potential consideration regarding how the skill handles untrusted data. It ingests information from the memory-bank.md file and processes user-provided strings for workbook and table names.
  • Ingestion points: Data enters the process via memory-bank.md, power.config.json, and direct user input.
  • Boundary markers: The instructions do not define specific delimiters for separating external data from instructions.
  • Capability inventory: The skill has the ability to execute shell commands (Bash) and modify files (Write, Edit).
  • Sanitization: There are no explicit validation or escaping steps described for the strings interpolated into commands. While typical for development-oriented tools, users should ensure workbook names and project configurations do not contain unexpected control characters.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 8, 2026, 08:16 AM