xlsx
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
recalc.pyscript executes system commands viasubprocess.runto interact with LibreOffice and manage execution timeouts. The script constructs command lists that include thesofficebinary and system timeout utilities (timeoutorgtimeout) to process the target Excel files. - [DYNAMIC_EXECUTION]: The skill dynamically generates a LibreOffice Basic macro and saves it to the local filesystem to facilitate spreadsheet recalculation. The
setup_libreoffice_macrofunction inrecalc.pywrites XML-formatted Basic code to a file namedModule1.xbawithin the user's LibreOffice configuration directory and subsequently triggers its execution. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external spreadsheet files (Excel, CSV, TSV), which creates a potential attack surface for instructions embedded in data processed by the agent.
- Ingestion points: The skill uses
pd.read_excel()andload_workbook()to read user-supplied or external files. - Boundary markers: No explicit boundary markers or warnings to ignore embedded instructions are provided in the skill guidelines.
- Capability inventory: The skill has capabilities including local shell command execution (via
recalc.py), filesystem access, and the ability to execute arbitrary Python code for data manipulation. - Sanitization: There is no evidence of sanitization or validation of cell content before it is processed or used in calculations.
Audit Metadata