dgn-to-excel

BENIGN in purpose and data flow, but with elevated supply-chain risk because it requires an external proprietary DgnExporter.exe that is not registry-distributed or clearly checksum-verified. The capability matches the stated DGN-to-Excel purpose, and there is no evidence of exfiltration or credential harvesting, but the unverifiable binary dependency pushes overall risk to high under the required scoring rules.