xlsx

Warn

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONPERSISTENCE
Full Analysis
  • [COMMAND_EXECUTION]: The recalc.py script uses subprocess.run to execute system commands. It invokes the soffice binary (LibreOffice) to perform spreadsheet recalculations and may also execute timeout or gtimeout for process management.
  • [DYNAMIC_EXECUTION]: The script performs dynamic code generation by writing a StarBasic macro file (Module1.xba) to the local filesystem and then instructing LibreOffice to execute it. This mechanism is used to automate the formula recalculation process.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external spreadsheet data (.xlsx, .csv, .tsv). Maliciously crafted content within these files could attempt to influence the agent's behavior or exploit the recalculation environment.
  • Ingestion points: Data is loaded using pandas.read_excel and openpyxl.load_workbook as outlined in SKILL.md.
  • Boundary markers: The instructions do not implement explicit delimiters or include warnings to ignore instructions embedded within the spreadsheet data.
  • Capability inventory: The skill has the ability to write files (wb.save) and execute shell commands (recalc.py calling soffice).
  • Sanitization: No specific sanitization or validation of the spreadsheet content is performed before the data is processed or recalculated.
  • [PERSISTENCE]: The recalc.py script modifies the local user environment by creating a persistent macro file in the LibreOffice configuration directory (~/.config/libreoffice/ or ~/Library/Application Support/LibreOffice/).
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 15, 2026, 03:57 AM