spreadsheet
Warn
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions include running
sudo apt-get installto obtain system utilities likelibreofficeandpoppler-utils, which requires elevated privileges. It also executes these tools as subprocesses for file rendering and conversion tasks. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it ingests data from external spreadsheet files without explicit sanitization or the use of boundary markers. Ingestion points: Untrusted data is read from
.xlsx,.csv, and.tsvfiles. Boundary markers: None provided in the instructions. Capability inventory: Subprocess execution, file system writes, and package installation. Sanitization: Absent. Additionally, the skill instructs the agent to hide the existence of internal tools and their APIs from the user. - [EXTERNAL_DOWNLOADS]: The skill downloads and installs standard Python packages (
openpyxl,pandas,matplotlib) and well-known system utilities from official repositories.
Audit Metadata