Security audit

Excel Batch Processor

Security checks for vulnerabilities and agentic risk

Overview

This Excel batch-processing skill is coherent and purpose-aligned, with ordinary file-processing risks users should manage through backups and explicit output paths.

Install only if you are comfortable with Chinese-language commands and batch spreadsheet processing. Before using wildcards or cleaning/fill operations, work on copies or direct outputs to a separate folder, and review skipped-error results so silent failures do not hide incomplete processing.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (3)

Missing User Warnings

Medium

Confidence: 91% confidence
Finding: The skill describes batch operations that can modify, split, convert, and overwrite large numbers of Excel files, but it does not warn users about destructive changes, overwrite behavior, wildcard scope, or the need for backups. In an automation context, missing safeguards can lead to accidental data loss or corruption across many files, especially with commands like batch fill and cleaning operations.

Natural-Language Policy Violations

Low

Confidence: 93% confidence
Finding: The skill documentation is entirely in Chinese and presents commands only in Chinese, with no indication that users may choose another language or locale. Per the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is explicitly justified.

Natural-Language Policy Violations

Low

Confidence: 91% confidence
Finding: The display name and description are provided only in Chinese, which indicates a fixed language/locale presentation. There is no accompanying multilingual option, opt-in, or documentation that this skill is intended only for a Chinese-speaking or region-specific context.

Static analysis

No suspicious patterns detected.