Security audit
Security checks for vulnerabilities and agentic risk
This is a single Markdown-only Excel generation skill whose macro-enabled output risk is disclosed and purpose-aligned, with no hidden execution or persistence found.
Install only if you expect the agent to create Excel workbooks, including possible .xlsm files. Treat generated macro-enabled spreadsheets as executable content: use macros only from trusted requests, review formulas and VBA before sharing or opening broadly, and save generated workbooks under new filenames until verified.
The skill explicitly advertises support for VBA macros, .xlsm files, and embedded automation scripts without any warning, consent flow, or restriction. Because macros are executable code and Excel files are a common malware delivery vehicle, this materially increases the risk of generating or propagating code-bearing spreadsheets that could execute harmful actions when opened by a user.
This markdown file describes generating Excel workbooks, which inherently creates or modifies user data files, yet it provides no warning about reviewing outputs, choosing safe save locations, or avoiding accidental replacement of existing spreadsheets. For markdown files, omissions of warnings about behaviors affecting user data are in scope.
No suspicious patterns detected.
