xlsx
Pass
Audited by Gen Agent Trust Hub on Feb 26, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The
recalc.pyscript executes thesoffice(LibreOffice) binary viasubprocess.runto perform headless formula recalculation. It also utilizes systemtimeoutorgtimeoutcommands to manage process execution limits. - [DYNAMIC_EXECUTION]: To enable recalculation,
recalc.pywrites a StarBasic macro (Module1.xba) to the user's local LibreOffice configuration directory. This macro is a hardcoded template used to trigger thecalculateAllandstoremethods within the office suite. - [INDIRECT_PROMPT_INJECTION]: As the skill is designed to read and process external
.xlsxand.csvfiles usingpandasandopenpyxl, it possesses an inherent surface for indirect prompt injection. However, the skill treats spreadsheet content as data for calculation and formatting rather than as a source of instructions for the agent's core logic. - Ingestion points: Reading Excel files via
pd.read_excel()andload_workbook()inSKILL.mdcode examples. - Boundary markers: Not explicitly defined in the provided Python snippets.
- Capability inventory: File system writes (
wb.save), and command execution viarecalc.pyandscripts/generate_schematic.py. - Sanitization: Standard library parsing is used, but no specific NL sanitization is implemented for cell content.
Audit Metadata