xlsx
Pass
Audited by Gen Agent Trust Hub on May 27, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The included
recalc.pyscript utilizes thesubprocessmodule to execute thesofficebinary. This allows the skill to recalculate formula values in Excel workbooks using a headless LibreOffice instance, which is necessary for spreadsheet accuracy. - [DYNAMIC_EXECUTION]: At runtime,
recalc.pycreates a LibreOffice Basic macro file (Module1.xba) within the user's application configuration directory. This macro is then executed to automate the calculation and saving of workbooks. The generated code is static and used strictly for internal automation. - [INDIRECT_PROMPT_INJECTION]: The skill interacts with external spreadsheet data which could potentially contain malicious content intended to influence the agent. The implementation uses standard data processing libraries, and the risk is considered low given the intended use-case of data analysis.
Audit Metadata