spreadsheets

Pass

Audited by Gen Agent Trust Hub on Aug 11, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The scripts peek.py, profile.py, and recalc.py utilize subprocess.run to invoke external spreadsheet utilities including qsv, duckdb, and soffice (LibreOffice). These executions are performed using list-based arguments without shell invocation, ensuring that file paths and parameters are handled safely within the local environment.
  • [DYNAMIC_EXECUTION]: The recalc.py script dynamically generates a temporary LibreOffice macro to automate workbook recalculation. This process uses a static, hardcoded StarBasic template and executes within an isolated, temporary application profile to ensure the integrity of the recalculation process.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted external data (CSV/Excel files). It proactively addresses indirect prompt injection risks by instructing the agent to escape spreadsheet formula-prefix cells (=, +, and @) and provides built-in redaction flags (--redact-samples) in the profiling tools to prevent the exposure of sensitive cell data.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 11, 2026, 12:40 PM
Security Audit — agent-trust-hub — spreadsheets