legacy-xls-python
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were identified. The skill is utility-focused and includes explicit safety precautions for handling untrusted legacy file formats.
- [DATA_EXFILTRATION]: The provided diagnostic script is read-only and uses the standard Python library to perform local file analysis. No network communication or data exfiltration mechanisms are present.
- [REMOTE_CODE_EXECUTION]: No remote code execution or dynamic code evaluation patterns were found. The skill relies on standard, well-known Python packages for spreadsheet processing.
- [PROMPT_INJECTION]: The instructions do not contain any patterns intended to bypass safety guardrails or override agent behavior. Instructions are purely instructional for handling Excel data.
- [COMMAND_EXECUTION]: The documentation mentions command-line utilities like LibreOffice for file conversion, but it does not provide scripts that execute arbitrary or dangerous commands automatically. The scripts included are focused on internal file analysis.
Audit Metadata