Security audit

Excel Spreadsheet

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent spreadsheet-generation skill for CellCog, with privacy and supply-chain cautions users should understand before use.

Before installing, verify that the CellCog package and skill come from the expected publisher, prefer a pinned or isolated install when possible, and avoid submitting confidential, regulated, or business-sensitive spreadsheet data unless CellCog's data handling is acceptable for your use.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:233
Finding: Unpinned Third-Party Dependency Installation
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The skill advertises spreadsheet generation through CellCog and requires CELLCOG_API_KEY, but it does not clearly warn that user prompts, spreadsheet contents, and potentially sensitive financial/business data may be transmitted to an external service. In this context, the omission is significant because the skill explicitly targets budgets, financial models, sales trackers, and other data categories that often contain confidential information.
Content: No source excerpt is available for this finding.

Rp1

Medium

Category: MCP Rug Pull
Confidence: 92% confidence
Finding: The installation instruction uses npx skills add ... without pinning a specific package version, which can cause users to fetch whatever version is current at execution time. That creates a supply-chain risk: a compromised upstream package, typo-squatted dependency, or malicious newly published version could be executed in the user's environment.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.