xlsx
Pass
Audited by Gen Agent Trust Hub on Feb 19, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Dynamic Execution (LOW): The script
recalc.pygenerates a LibreOffice Basic macro (Module1.xba) and writes it to the local filesystem (~/.config/libreofficeor similar). This is required to trigger a full recalculation via the command line. The macro code is hardcoded and limited to callingcalculateAll()andstore(). While typically a MEDIUM concern, the severity is lowered because this behavior is essential to the skill's primary purpose. - Persistence Mechanisms (LOW): The macro file persists in the user's LibreOffice configuration folder after the script finishes. This is a minor modification of the local environment to support ongoing functionality.
- Command Execution (LOW): The script invokes the
sofficebinary andtimeout/gtimeoututilities usingsubprocess.run. It uses a list for arguments rather than a shell string, which prevents command injection vulnerabilities from malicious filenames.
Audit Metadata