xlsx
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
recalc.pyscript utilizessubprocess.runto invoke thesoffice(LibreOffice) binary for formula evaluation, which is a necessary step for dynamic spreadsheet generation. - [COMMAND_EXECUTION]: The
recalc.pyscript modifies the user's environment by writing a StarBasic macro file (Module1.xba) to the LibreOffice configuration directory to enable automated calculation and saving. - [COMMAND_EXECUTION]: The script checks for and utilizes system
timeoutorgtimeoututilities to ensure the headless LibreOffice process does not exceed defined execution limits. - [PROMPT_INJECTION]: The skill processes untrusted spreadsheet data, presenting a surface for indirect prompt injection. Ingestion points: Data is loaded via
pd.read_excelandload_workbookas described inSKILL.md. Boundary markers: The agent is instructed to follow existing template conventions and use provided validation scripts. Capability inventory:recalc.pyperforms subprocess execution and file system writes;pandasandopenpyxlperform file I/O. Sanitization: Therecalc.pyscript includes a post-calculation scanning phase that identifies common Excel error codes (e.g., #REF!, #VALUE!) to ensure model integrity.
Audit Metadata