xlsx
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
recalc.pyscript executes system commands includingsoffice(LibreOffice) andtimeout/gtimeoututilities via thesubprocess.runmethod. - [COMMAND_EXECUTION]: The
recalc.pyscript performs dynamic script generation by writing a hardcoded LibreOffice Basic macro (Module1.xba) to the user's local configuration directory (~/.config/libreofficeor~/Library/Application Support/LibreOffice) and subsequently executing it. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by processing external Excel and CSV files through its instructions.
- Ingestion points: Spreadsheet data is loaded into the agent's context via
pd.read_excel()andload_workbook()calls as described inSKILL.md. - Boundary markers: Absent; the instructions do not specify any delimiters or warnings to ignore instructions that might be embedded within the processed data.
- Capability inventory: The skill possesses file system write access and the ability to execute shell commands via the
recalc.pyscript. - Sanitization: There is no provided logic or instruction to sanitize, validate, or escape the content of the spreadsheets before they are processed by the agent.
Audit Metadata