ClawHub

officecli-xlsx

Security checks across malware telemetry and agentic risk

Overview

The spreadsheet features mostly fit the stated purpose, but the skill tells agents to automatically download and run an unpinned remote installer/updater before normal use.

Review carefully before installing. Prefer installing officecli yourself from a pinned, verified release and avoid automatic upgrades from the skill. Use backup copies for important workbooks, especially before remove, import, merge, or raw XML operations.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (6)

Context-Inappropriate Capability

High
Confidence
99% confidence
Finding
The skill instructs the agent to automatically install or upgrade a tool by fetching and executing a remote shell script from GitHub via curl | bash. That creates a direct remote code execution path unrelated to merely processing XLSX files, and it also introduces supply-chain risk if the repository, network path, or referenced script is compromised.

Context-Inappropriate Capability

Medium
Confidence
89% confidence
Finding
The guide exposes a low-level raw XML injection mechanism for spreadsheet chart parts, allowing arbitrary append/replace/remove operations against OOXML structures. In a skill intended for routine workbook creation, this bypasses higher-level safety constraints and can be abused to create malformed or deceptive files, embed dangerous workbook structures, or manipulate document internals in ways that are hard to review.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The guide documents destructive commands such as sheet and row removal without an explicit warning to back up the workbook or confirm that deletion is intentional. In a file-editing skill, this increases the chance of accidental irreversible data loss, especially when users or agents apply commands directly to important spreadsheets.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The raw XML escape hatch exposes low-level workbook mutation primitives but does not clearly warn that malformed XPath selections or XML edits can corrupt workbook structure, formulas, styles, or relationships in ways that may not be recoverable. Because this skill is specifically for modifying `.xlsx` files, users are likely to treat these commands as supported workflows, making accidental corruption more plausible and impactful.

External Transmission

Medium
Category
Data Exfiltration
Content
# Windows: irm https://raw.githubusercontent.com/iOfficeAI/OfficeCli/main/install.ps1 -OutFile "$env:TEMP\officecli_install.ps1"; & "$env:TEMP\officecli_install.ps1"
else
    CURRENT=$(officecli --version 2>&1 | grep -oE '[0-9]+\.[0-9]+\.[0-9]+' | head -1)
    LATEST=$(curl -fsSL https://api.github.com/repos/iOfficeAI/OfficeCLI/releases/latest | grep '"tag_name"' | sed -E 's/.*"v?([0-9.]+)".*/\1/')
    if [ "$CURRENT" != "$LATEST" ]; then
        echo "Upgrading officecli $CURRENT → $LATEST..."
        curl -fsSL https://raw.githubusercontent.com/iOfficeAI/OfficeCli/main/install.sh -o /tmp/officecli_install.sh && bash /tmp/officecli_install.sh && rm -f /tmp/officecli_install.sh
Confidence
95% confidence
Finding
https://api.github.com/

External Script Fetching

Low
Category
Supply Chain
Content
```bash
if ! command -v officecli &> /dev/null; then
    echo "Installing officecli..."
    curl -fsSL https://raw.githubusercontent.com/iOfficeAI/OfficeCli/main/install.sh -o /tmp/officecli_install.sh && bash /tmp/officecli_install.sh && rm -f /tmp/officecli_install.sh
    # Windows: irm https://raw.githubusercontent.com/iOfficeAI/OfficeCli/main/install.ps1 -OutFile "$env:TEMP\officecli_install.ps1"; & "$env:TEMP\officecli_install.ps1"
else
    CURRENT=$(officecli --version 2>&1 | grep -oE '[0-9]+\.[0-9]+\.[0-9]+' | head -1)
Confidence
99% confidence
Finding
curl -fsSL https://raw.githubusercontent.com/iOfficeAI/OfficeCli/main/install.sh -o /tmp/officecli_install.sh && bash

VirusTotal

61/61 vendors flagged this skill as clean.

View on VirusTotal