minimax-xlsx
Pass
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements secure archive handling in
scripts/xlsx_unpack.pyby performing path-traversal validation on all file members before extraction to prevent directory traversal attacks.\n- [SAFE]: Command execution is limited to the headless recalculation of spreadsheet formulas via the LibreOffice (soffice) engine, implemented with list-based argument passing inscripts/libreoffice_recalc.pyto prevent shell injection.\n- [SAFE]: The skill's primary function of processing untrusted spreadsheet data is performed locally using structured XML manipulation and standard libraries; no data exfiltration, hardcoded credentials, or malicious prompt injection patterns were detected.
Audit Metadata