xlsx
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The helper script
recalc.pyuses thesubprocessmodule to executesoffice(LibreOffice) and system timeout utilities. These calls are used to perform headless spreadsheet recalculations and are implemented using best practices (list-based arguments) to prevent command injection. - [DYNAMIC_EXECUTION]: The skill dynamically generates a LibreOffice StarBasic macro (
Module1.xba) in the user's application configuration directory. This macro is required to trigger formula evaluation within the spreadsheet engine, as the primary Python libraries used (openpyxl) do not support formula calculation natively. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external spreadsheet files (.xlsx, .csv, etc.), which creates a potential surface for indirect prompt injection. 1. Ingestion points: Spreadsheet files processed via pandas and openpyxl. 2. Boundary markers: None explicitly mentioned in the instructions to distinguish data from instructions. 3. Capability inventory: The skill has the ability to read and write files and execute local shell commands via the recalculation script. 4. Sanitization: No specific validation or sanitization of spreadsheet cell content is implemented.
Audit Metadata