excel-report-generator
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external data sources such as CSV files and Excel templates, which inherently creates a surface for indirect prompt injection through malicious data content.
- Ingestion points: Data enters the context via
pd.read_csv()inSKILL.mdandexamples/basic_report.py, and throughload_workbook()inexamples/template_fill.py. - Boundary markers: No explicit delimiters or safety instructions are used to wrap data values in the provided code snippets, which is standard for programmatic report generation.
- Capability inventory: The skill possesses file writing capabilities for generating reports (
to_excel,save). It does not contain network access tools, subprocess execution, or arbitrary code execution capabilities. - Sanitization: The skill relies on standard library parsing and does not implement custom sanitization, which is appropriate given its limited filesystem-only capabilities.
Audit Metadata