ClawHub
Back to skill

Security audit

xlsx

Security checks across malware telemetry and agentic risk

Overview

This spreadsheet skill is useful and mostly purpose-aligned, but it makes persistent LibreOffice profile changes and can modify workbooks without enough user-control guardrails.

Install only if you are comfortable with the skill running LibreOffice locally, modifying spreadsheet files, and adding a persistent LibreOffice macro to your user profile. Prefer using it on trusted spreadsheets, in a sandbox or disposable LibreOffice profile, and keep backups before editing or recalculating important workbooks.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Behavioral ASTexec() Call, eval() Call, Dynamic Import
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (5)

subprocess module call

Medium
Category
Dangerous Code Execution
Content
if timeout_cmd:
            cmd = [timeout_cmd, str(timeout)] + cmd
    
    result = subprocess.run(cmd, capture_output=True, text=True)
    
    if result.returncode != 0 and result.returncode != 124:  # 124 is timeout exit code
        error_msg = result.stderr or 'Unknown error during recalculation'
Confidence
89% confidence
Finding
result = subprocess.run(cmd, capture_output=True, text=True)

Vague Triggers

Medium
Confidence
89% confidence
Finding
The activation text is extremely broad and can trigger on routine spreadsheet-related requests, causing the skill to engage in situations where users may only want analysis, not file manipulation or command execution. Over-broad activation increases the chance of unnecessary access to local files and use of higher-risk workflows such as workbook modification and recalculation.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The workflow describes creating/loading, modifying, and saving spreadsheets without any requirement to warn the user about overwrites, output paths, or preservation of originals. In practice, this can lead to accidental destruction of user data, especially when operating on existing workbooks or when output filenames collide with source files.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The editing examples include destructive operations like `insert_rows`, `delete_cols`, and direct cell replacement, but provide no backup, preview, or confirmation guidance. Those actions can irreversibly corrupt formulas, references, formatting, or business-critical workbook structure if applied to the wrong sheet or file.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The script writes a LibreOffice Basic macro into the user's application profile, creating persistent executable code in a trusted office-macro location. In this spreadsheet-processing skill, that is especially dangerous because it modifies the host user's environment and leaves behind a reusable execution primitive that may affect later office sessions or be abused by other documents/processes.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.