xlsx
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPERSISTENCEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
recalc.pyscript executes system commands to invoke LibreOffice (soffice) and process timeouts (timeoutorgtimeouton macOS) usingsubprocess.run. - [PERSISTENCE]: The
recalc.pyscript modifies the local environment by creating a persistent macro file (Module1.xba) within the LibreOffice user configuration directory (e.g.,~/.config/libreofficeor~/Library/Application Support/LibreOffice). This is used to enable the formula recalculation functionality. - [DYNAMIC_EXECUTION]: The skill uses
recalc.pyto programmatically generate and execute a StarBasic macro within the LibreOffice environment to perform formula evaluation. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze data from untrusted external spreadsheets, which creates a surface for indirect prompt injection if those files contain malicious instructions.
- Ingestion points: Data is read from external files using
pandas.read_excelandopenpyxl.load_workbookas described inSKILL.md. - Boundary markers: The instructions do not specify the use of boundary markers or instructions to ignore embedded commands when processing spreadsheet data.
- Capability inventory: The skill possesses file-writing capabilities (via
openpyxl) and shell execution capabilities (viarecalc.py). - Sanitization: No explicit sanitization or validation logic is provided for content extracted from spreadsheet cells before it is processed by the agent.
Audit Metadata