xlsx

Pass

Audited by Gen Agent Trust Hub on May 27, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The included recalc.py script utilizes the subprocess module to execute the soffice binary. This allows the skill to recalculate formula values in Excel workbooks using a headless LibreOffice instance, which is necessary for spreadsheet accuracy.
  • [DYNAMIC_EXECUTION]: At runtime, recalc.py creates a LibreOffice Basic macro file (Module1.xba) within the user's application configuration directory. This macro is then executed to automate the calculation and saving of workbooks. The generated code is static and used strictly for internal automation.
  • [INDIRECT_PROMPT_INJECTION]: The skill interacts with external spreadsheet data which could potentially contain malicious content intended to influence the agent. The implementation uses standard data processing libraries, and the risk is considered low given the intended use-case of data analysis.
Audit Metadata
Risk Level
SAFE
Analyzed
May 27, 2026, 02:36 PM
Security Audit — agent-trust-hub — xlsx