excel-pivot-wizard

SUSPICIOUS. The skill’s purpose and capabilities are internally coherent for spreadsheet analysis, and there is no evidence of credential theft, hidden execution, or malicious data routing. The main risk is install/execution trust: it relies on an unspecified Excel MCP server, leaving the actual code path, publisher, and data handling undefined. This is better classified as a medium-risk, under-specified integration than malware.