xlsx
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The
recalc.pyscript executes thesofficebinary from LibreOffice to perform headless formula recalculation and uses system utilities liketimeoutorgtimeout. This is necessary for the skill's primary function.\n- [COMMAND_EXECUTION]: Therecalc.pyscript dynamically creates a LibreOffice Basic macro file (Module1.xba) in the user's local configuration directory to facilitate workbook recalculation. The generated code is static and performs only legitimate spreadsheet tasks.\n- [PROMPT_INJECTION]: The skill processes spreadsheet data from external files, creating an indirect prompt injection surface. However, the data is handled using standard libraries without evidence of instructions being executed from the content.
Audit Metadata