excel-mcp-report-formatting
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from Excel workbooks which could theoretically contain malicious instructions designed to influence the agent.
- Ingestion points: Workbook data accessed via Excel MCP tools, including Tables and PivotTables, as described in SKILL.md.
- Boundary markers: Instructions limit the scope to specific reports ("Read that guide for the requested report, not unrelated workbook work").
- Capability inventory: Formatting tools such as
range_format,table,chart_config, andpivottable_fieldspecified in SKILL.md. - Sanitization: No explicit sanitization or content validation is mentioned for cell values before applying formats.
- [EXTERNAL_DOWNLOADS]: The skill references external documentation for tool reference and recovery procedures.
- Evidence: Link to
https://excelmcpserver.dev/reference/found in SKILL.md.
Audit Metadata