xlsx

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The helper script recalc.py uses the subprocess module to execute soffice (LibreOffice) and system timeout utilities. These calls are used to perform headless spreadsheet recalculations and are implemented using best practices (list-based arguments) to prevent command injection.
  • [DYNAMIC_EXECUTION]: The skill dynamically generates a LibreOffice StarBasic macro (Module1.xba) in the user's application configuration directory. This macro is required to trigger formula evaluation within the spreadsheet engine, as the primary Python libraries used (openpyxl) do not support formula calculation natively.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external spreadsheet files (.xlsx, .csv, etc.), which creates a potential surface for indirect prompt injection. 1. Ingestion points: Spreadsheet files processed via pandas and openpyxl. 2. Boundary markers: None explicitly mentioned in the instructions to distinguish data from instructions. 3. Capability inventory: The skill has the ability to read and write files and execute local shell commands via the recalculation script. 4. Sanitization: No specific validation or sanitization of spreadsheet cell content is implemented.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 08:03 AM