xlsx

Pass

Audited by Gen Agent Trust Hub on Feb 23, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The recalc.py script uses subprocess.run to call the soffice (LibreOffice) binary for formula recalculation. This is a standard and necessary operation for the skill's purpose.
  • [COMMAND_EXECUTION]: The recalc.py script generates and writes a Basic macro to the LibreOffice user configuration directory to automate the calculation and saving of spreadsheets. This is performed using a hardcoded template and is a local operation.
  • [PROMPT_INJECTION]: The skill ingests data from external Excel and CSV files, creating a surface for potential indirect prompt injection. The risk is mitigated by the use of standard data-processing libraries (pandas, openpyxl) that do not interpret cell content as instructions or code.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 23, 2026, 12:51 PM