minimax-xlsx
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
subprocess.runwith list-based arguments to execute local scripts and system utilities, avoiding shell injection vulnerabilities. scripts/xlsx_insert_row.pyexecutesscripts/xlsx_shift_rows.pyfor internal row-shifting logic.scripts/libreoffice_recalc.pyexecutes the localsoffice(LibreOffice) binary in headless mode to perform dynamic formula recalculation.- [SAFE]: The skill implements security best practices for handling compressed archives.
scripts/xlsx_unpack.pyincludes deterministic checks to block path traversal (zip-slip) attacks by ensuring all extracted files remain within the designated working directory.- [SAFE]: All external libraries and tools referenced, such as
pandas,openpyxl, andLibreOffice, are industry-standard and sourced locally.
Audit Metadata