xlsx
Pass
Audited by Gen Agent Trust Hub on Feb 23, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The
recalc.pyscript usessubprocess.runto call thesoffice(LibreOffice) binary for formula recalculation. This is a standard and necessary operation for the skill's purpose. - [COMMAND_EXECUTION]: The
recalc.pyscript generates and writes a Basic macro to the LibreOffice user configuration directory to automate the calculation and saving of spreadsheets. This is performed using a hardcoded template and is a local operation. - [PROMPT_INJECTION]: The skill ingests data from external Excel and CSV files, creating a surface for potential indirect prompt injection. The risk is mitigated by the use of standard data-processing libraries (pandas, openpyxl) that do not interpret cell content as instructions or code.
Audit Metadata