skills/ninehills/skills/minimax-xlsx/Gen Agent Trust Hub

minimax-xlsx

Pass

Audited by Gen Agent Trust Hub on Apr 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements secure archive handling in scripts/xlsx_unpack.py by performing path-traversal validation on all file members before extraction to prevent directory traversal attacks.\n- [SAFE]: Command execution is limited to the headless recalculation of spreadsheet formulas via the LibreOffice (soffice) engine, implemented with list-based argument passing in scripts/libreoffice_recalc.py to prevent shell injection.\n- [SAFE]: The skill's primary function of processing untrusted spreadsheet data is performed locally using structured XML manipulation and standard libraries; no data exfiltration, hardcoded credentials, or malicious prompt injection patterns were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 18, 2026, 04:07 PM