excel-cli-report-formatting
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes Excel workbooks through the
excelclitool, creating a surface where untrusted data within those files could potentially influence agent behavior. - Ingestion points: Excel workbook data processed via
excelcli(mentioned in SKILL.md). - Boundary markers: None identified; there are no instructions to the agent to disregard embedded content or treat workbook data as untrusted.
- Capability inventory: The skill uses
excelclito read and apply formatting conventions to Excel files, which involves file system interaction. - Sanitization: No explicit sanitization, validation, or escaping of the Excel content is described in the workflow.
- [COMMAND_EXECUTION]: The skill operates by executing the
excelclicommand-line tool to perform formatting actions and discover tool capabilities (e.g.,excelcli <command> --help).
Audit Metadata