Security audit
Microsoft Excel
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed Microsoft Excel integration that uses ClawLink OAuth to read and modify user-selected Excel workbooks, with no artifact-backed malicious behavior found.
Before installing, confirm you trust ClawLink to manage Microsoft OAuth access and only connect Microsoft accounts whose Excel, OneDrive, or SharePoint workbooks you intend OpenClaw to access. Review previews carefully before approving write, delete, sharing, upload, or permission-changing actions.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
56/56 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.