minimax-xlsx

Pass

Audited by Gen Agent Trust Hub on Apr 15, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes subprocess.run with list-based arguments to execute local scripts and system utilities, avoiding shell injection vulnerabilities.
  • scripts/xlsx_insert_row.py executes scripts/xlsx_shift_rows.py for internal row-shifting logic.
  • scripts/libreoffice_recalc.py executes the local soffice (LibreOffice) binary in headless mode to perform dynamic formula recalculation.
  • [SAFE]: The skill implements security best practices for handling compressed archives.
  • scripts/xlsx_unpack.py includes deterministic checks to block path traversal (zip-slip) attacks by ensuring all extracted files remain within the designated working directory.
  • [SAFE]: All external libraries and tools referenced, such as pandas, openpyxl, and LibreOffice, are industry-standard and sourced locally.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 15, 2026, 09:36 AM