csv-excel-merger
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Python and the
pandaslibrary to perform file system operations, such as reading input spreadsheets and writing a consolidated output file. - [PROMPT_INJECTION]: The skill ingests untrusted data from external sources. Ingestion points: Content is read from CSV, Excel, and TSV files via
pd.read_csvandpd.read_excel. Boundary markers: None; the skill does not use specific delimiters to isolate processed data from the prompt context. Capability inventory: Includes file system access and script execution capabilities. Sanitization: No content sanitization is performed on the data values within the spreadsheets. While this creates a potential surface for indirect prompt injection, the risk is minimized as the skill logic focuses on structural data management rather than interpreting content as instructions. - [SAFE]: No malicious patterns such as obfuscation, credential harvesting, or unauthorized network operations were detected. The use of standard libraries for their intended purpose is appropriate.
Audit Metadata