自营发货策略+分区方案配置拆分导出. 读取Excel文件,按照指定的列进行分组,将相同组的数据导出到新文件,文件命名用分组字段组合命名。

Security checks across malware telemetry and agentic risk

Overview

The skill appears to be a straightforward local Excel-splitting utility that reads a user-provided spreadsheet and writes grouped output files.

This looks safe for its stated purpose. Before installing or running it, use a test or dedicated output folder, keep a copy of the original Excel file, and install any missing Python dependencies only from trusted sources.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI02: Tool Misuse and Exploitation
Low
What this means

The skill can write files on your computer in the output directory you provide.

Why it was flagged

The script creates an output directory and writes Excel files to it. This is purpose-aligned, but it can create or overwrite local files based on the selected output directory and generated filenames.

Skill content
if not os.path.exists(output_dir):
        os.makedirs(output_dir)
...
group_df.to_excel(output_path, index=False)
Recommendation

Run it only on spreadsheets you intend to process, use a dedicated output folder, and review existing files there before running.

#
ASI04: Agentic Supply Chain Vulnerabilities
Info
What this means

If pandas or related Excel packages are not already installed, you may need to install them separately.

Why it was flagged

The script depends on the external pandas package, but the provided artifacts do not include a dependency or install specification. This is an operational dependency note rather than evidence of malicious behavior.

Skill content
import pandas as pd
Recommendation

Install any needed Python packages from trusted package sources and preferably use a controlled Python environment.