xlsx
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Python's subprocess module to run external document processing utilities. This includes invoking soffice (LibreOffice) in scripts/recalc.py for formula recalculation, gcc in scripts/office/soffice.py to compile a compatibility shim, and git in scripts/office/validators/redlining.py to generate diffs for change tracking validation.
- [SAFE]: The implementation demonstrates security best practices by using the defusedxml library for all XML parsing (e.g., in scripts/office/validators/base.py), which mitigates risks associated with XML external entity (XXE) attacks.
Audit Metadata