spreadsheet-modeling

Pass

Audited by Gen Agent Trust Hub on Apr 7, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructions in SKILL.md include a directory listing command (ls) used to check for the presence of recommended companion skills in local skill directories (e.g., ~/.claude/skills/). This is a discovery mechanism intended to suggest additional relevant tools to the user and does not involve data exfiltration or sensitive file access.
  • [SAFE]: The provided reference files (references/vba-patterns.md, references/formula-patterns.md) contain standard technical patterns for spreadsheet automation. Example code for network requests uses placeholder domains and explicitly recommends secure practices such as using PropertiesService for API key management rather than hardcoding credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 7, 2026, 03:05 PM
Security Audit — agent-trust-hub — spreadsheet-modeling