wps-excel
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from Excel spreadsheets, creating a vulnerability surface where malicious instructions could be embedded in cell values, formulas, or comments.
- Ingestion points: The skill utilizes tools such as
wps_excel_read_range,wps_excel_get_cell_value,wps_excel_get_formula, andwps_excel_get_cell_comments(defined inSKILL.md) to pull external data into the agent's context. - Boundary markers: The instructions lack specific guidance on using delimiters or safety warnings to prevent the agent from obeying instructions found within the data.
- Capability inventory: The agent has extensive control over the environment through 80 MCP tools, including the ability to delete sheets (
wps_excel_delete_sheet), modify formulas (wps_excel_set_formula), and export data to the local filesystem (wps_excel_export_chart_as_image). - Sanitization: No sanitization or validation protocols are described for data retrieved from workbooks before it is interpreted by the agent.
Audit Metadata