excel-workbooks
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from user-supplied Excel workbooks, which can contain untrusted content designed to influence agent behavior.
- Ingestion points: Spreadsheet files processed via the
xlsxcommand-line tool. - Boundary markers: The instructions do not define specific delimiters or warnings to help the agent distinguish between data and potentially malicious instructions embedded within cell values or formulas.
- Capability inventory: The skill utilizes a shell environment (
bash) with capabilities for file parsing (xlsx), data processing (jq), and file system interaction (reading from/dropboxand/googledrive, writing to/tmp). - Sanitization: There are no guidelines for the agent to sanitize or validate spreadsheet content before processing the information.
- [EXTERNAL_DOWNLOADS]: The skill directs users to install external plugins and connect to a remote server.
- Instructions include adding the
un-seen/hedwigai-skillsplugin and connecting thehttps://mcp.hedwigai.com/remote MCP server. These external resources are provided by the skill's author to enable the described functionality. - [COMMAND_EXECUTION]: The skill relies on executing shell commands to perform its core functions.
- It instructs the agent to use the
xlsxprogram for reading and editing workbooks, andjqfor handling JSON output. - Operational workflows involve command-line file manipulations, such as copying workbooks to the
/tmpdirectory for editing purposes.
Audit Metadata