Excel 数据自动清洗引擎 Pro
PassAudited by VirusTotal on May 10, 2026.
Overview
Type: OpenClaw Skill Name: excel-auto-cleaner-pro Version: 1.0.0 The skill is a legitimate data processing utility designed for cleaning Excel, CSV, and JSON files. It utilizes standard tools such as Python's pandas and openpyxl via the 'exec' command to perform data deduplication, formatting, and validation as described in SKILL.md. No evidence of data exfiltration, malicious prompt injection, or unauthorized system access was found.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Sensitive customer, employee, financial, or ecommerce data could be exposed to an external search service during cleaning.
The skill may send spreadsheet-derived phone-number data to an external search provider for validation, but it does not define approval, minimization, destination, or retention boundaries.
- `web_search` — 辅助数据验证（如手机号归属地）
Require explicit user confirmation before any web_search on spreadsheet contents, avoid sending full personal identifiers, and prefer local/offline validation rules where possible.
The agent may run Python commands on local files to clean and generate spreadsheets.
The skill tells the agent to run local Python processing. This is expected for Excel automation, but users should be aware that local code execution is part of the workflow.
- `exec` — 运行 Python openpyxl/pandas 处理
Run it only on intended files, keep backups of originals, and review generated outputs before relying on them.
If used, the skill could write cleaned data into a third-party business workspace.
The optional Feishu export implies delegated account or workspace write permission, although no credential contract is declared in the metadata.
"导出飞书表格" → 写入飞书多维表格
Use Feishu export only after an explicit request, confirm the target workspace/table, and use the least-privileged account or token available.