xlsx
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security threats were identified. The skill follows best practices for spreadsheet manipulation and uses local processing for all tasks.
- [COMMAND_EXECUTION]: The
recalc.pyscript utilizessubprocess.runto invoke the localsoffice(LibreOffice) binary. This is a documented functional requirement for formula evaluation and does not involve untrusted remote sources or shell injection vulnerabilities. - [DATA_EXPOSURE]: The skill does not access sensitive system paths (e.g., SSH keys, credentials) or perform unauthorized network operations. All file access is limited to the spreadsheet data being processed.
- [REMOTE_CODE_EXECUTION]: No patterns of remote script downloading or execution were detected. The skill generates a local LibreOffice macro to handle recalculations, which is a standard procedure for this functionality.
Audit Metadata