excel-com-safe-write
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements high-standard safety practices for Excel automation, including explicitly disabling workbook macros (msoAutomationSecurityForceDisable) and external link updates to prevent potential exploits from untrusted files.
- [COMMAND_EXECUTION]: Uses a local PowerShell script to perform COM automation with Excel, which is a standard approach for handling legacy file formats.
- [INDIRECT_PROMPT_INJECTION]: The script effectively mitigates formula injection (CSV/DDE injection) risks that occur when untrusted data is written to spreadsheet cells. Ingestion points: Data input via the $Values parameter in scripts/Set-ExcelCells.ps1. Boundary markers: None present. Capability inventory: Filesystem write access to Excel workbooks through the Excel.Application COM object. Sanitization: The script uses regex to identify and reject any string values starting with formula-triggering characters (=, +, -, @).
Audit Metadata