excel-mcp-report-formatting

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from Excel workbooks which could theoretically contain malicious instructions designed to influence the agent.
  • Ingestion points: Workbook data accessed via Excel MCP tools, including Tables and PivotTables, as described in SKILL.md.
  • Boundary markers: Instructions limit the scope to specific reports ("Read that guide for the requested report, not unrelated workbook work").
  • Capability inventory: Formatting tools such as range_format, table, chart_config, and pivottable_field specified in SKILL.md.
  • Sanitization: No explicit sanitization or content validation is mentioned for cell values before applying formats.
  • [EXTERNAL_DOWNLOADS]: The skill references external documentation for tool reference and recovery procedures.
  • Evidence: Link to https://excelmcpserver.dev/reference/ found in SKILL.md.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 09:11 PM