excel-cli
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from Excel workbooks, which are external sources that could contain malicious instructions.
- Ingestion points: Reads state and content from Excel workbooks (SKILL.md).
- Boundary markers: No explicit delimiters or ignore-embedded-instruction warnings are specified.
- Capability inventory: PowerShell script execution (start-cli.ps1), writing to workbooks, data refreshes, and automation.
- Sanitization: No sanitization or filtering of workbook data is described.
- [REMOTE_CODE_EXECUTION]: The skill uses the npx launcher to fetch and execute the @sbroenne/excelcli package at runtime. Evidence: Instructions specify running npx -y @sbroenne/excelcli@latest.
- [EXTERNAL_DOWNLOADS]: The skill downloads the Excel CLI package from the NPM registry via npx.
- [COMMAND_EXECUTION]: The skill executes local PowerShell scripts to interface with the Excel plugin. Evidence: Call to & "\bin\start-cli.ps1" is used for CLI operations.
Audit Metadata