xlsx
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
recalc.pyscript executes thesoffice(LibreOffice) command-line utility viasubprocess.runto perform formula recalculation on spreadsheet files.\n- [EXTERNAL_DOWNLOADS]: The skill documentation references the use of standard Python librariespandasandopenpyxlfor data handling and Excel file operations.\n- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through the ingestion of untrusted spreadsheet data.\n - Ingestion points: Spreadsheet files (.xlsx, .xlsm, .csv, .tsv) are read using
pd.read_excelandload_workbookinSKILL.md.\n - Boundary markers: None identified in the provided documentation or scripts.\n
- Capability inventory: The skill can execute system commands via
recalc.py, write files to the local file system, and perform data analysis.\n - Sanitization: No specific sanitization or validation of spreadsheet cell content is performed before processing.
Audit Metadata