Security audit
Security checks for vulnerabilities and agentic risk
ClawScan rates this skill suspicious because a helper script may run attacker-controlled Python if its path can be influenced; the scan was partial, so the evidence is incomplete.
Consider the conditional helper-script execution risk and the undeclared tool scope before installing. The scan inspected all listed components but was marked partial because several referenced paths were missing, so the evidence is incomplete.
Without declared permissions the skill's intent is opaque and cannot be validated.
The subprocess uses an argument list, so workbook filenames do not create shell injection; however, its Python script is selected from EXCEL_RECALC_SCRIPT or ancestor-directory discovery with only an is_file check. If an attacker can influence that environment variable or plant a matching script in a searched directory, a recalculation request executes attacker-controlled Python with the agent's privileges. Formula recalculation is a normal part of this skill's workflow, making this conditional script-hijacking path relevant.
"message": "未找到内置 recalc.py；已设置 fullCalcOnLoad，Excel/WPS 打开时会自动重算，但第三方预览器仍可能显示空白",
}
try:
proc = subprocess.run(
[sys.executable, str(script), str(xlsx), "60"],
capture_output=True,
text=True,
Output size or generation rate is not bounded. Unbounded output enables denial-of-service through resource exhaustion, log flooding, or context-window stuffing.
color=chart_rgb(theme.accent_light),
showValue=True,
minLength=None,
maxLength=None,
),
)
count += 1
The worksheet-naming rule explicitly requires Chinese names rather than merely providing Chinese examples. The file offers no language choice or justification for imposing this requirement regardless of the user's preferred language.