add-excel
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill utilizes the Bash tool to run project-related commands such as the Power Apps CLI (
pa) and the Node package manager (npm). These operations are used to register data sources and compile the project, which is consistent with its stated purpose of managing application connectors. - Indirect Prompt Injection: There is a potential consideration regarding how the skill handles untrusted data. It ingests information from the
memory-bank.mdfile and processes user-provided strings for workbook and table names. - Ingestion points: Data enters the process via
memory-bank.md,power.config.json, and direct user input. - Boundary markers: The instructions do not define specific delimiters for separating external data from instructions.
- Capability inventory: The skill has the ability to execute shell commands (Bash) and modify files (Write, Edit).
- Sanitization: There are no explicit validation or escaping steps described for the strings interpolated into commands. While typical for development-oriented tools, users should ensure workbook names and project configurations do not contain unexpected control characters.
Audit Metadata