xlsx

Warn

Audited by Socket on Apr 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill’s stated purpose and core capabilities are coherent and mostly benign for spreadsheet work. The main issue is trust: it requires execution of an unspecified local recalc.py script that auto-configures a LibreOffice macro, but the skill provides no source, provenance, or integrity verification for that component. This makes the skill suspicious from an install/execution-trust standpoint, though not malicious based on the provided text.

Confidence: 83%Severity: 72%
Audit Metadata
Analyzed At
Apr 16, 2026, 03:11 PM
Package URL
pkg:socket/skills-sh/kcchien%2Fskills%2Fxlsx%2F@13fa03fe32101116fb679c4a187a14e774fe841e