xlsx-processing-anthropic
Pass
Audited by Gen Agent Trust Hub on Mar 7, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The
recalc.pyscript executes thesoffice(LibreOffice) binary and systemtimeoutorgtimeoututilities viasubprocess.run. This is used specifically to recalculate formulas within Excel workbooks, as documented in the skill's workflow. - [DATA_EXFILTRATION]: The skill performs local file operations using
pandasandopenpyxl. No network operations or unauthorized data transmissions were detected. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted data from external spreadsheet files.
- Ingestion points: Data enters the agent's context through
pandas.read_excelandopenpyxl.load_workbookas described inSKILL.md. - Boundary markers: There are no explicit instructions for the agent to use delimiters or ignore instructions embedded within spreadsheet cells.
- Capability inventory: The skill possesses file-writing capabilities and command execution via the
recalc.pyscript. - Sanitization: No explicit sanitization or filtering of cell content is implemented before processing.
- [DYNAMIC_EXECUTION]: The
recalc.pyscript dynamically generates a LibreOffice Basic macro (Module1.xba) in the user's local LibreOffice configuration directory. This macro is a fixed template used to automate the calculation of formulas and does not incorporate untrusted input into the executable code.
Audit Metadata