data-export-excel
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes instructions to use
subprocess.check_callto install theopenpyxllibrary. This is a standard environment setup pattern to ensure dependencies are present. - [COMMAND_EXECUTION]: The skill performs local file system write operations using
wb.save()to generate Excel workbooks, which is the primary intended functionality. - [PROMPT_INJECTION]: The skill presents a surface for indirect prompt injection by ingesting and processing external dataframes into Excel files. 1. Ingestion points: External DataFrames (e.g.,
adata.obs) processed in SKILL.md. 2. Boundary markers: None. 3. Capability inventory: Local file system writes and subprocess-based package installation. 4. Sanitization: Not explicitly implemented in the provided code snippets.
Audit Metadata