스킬 xlsx
📦
xlsx
콘텐츠 리비전 r1 중간 위험 ⚙️ 외부 명령어🌐 네트워크 접근📁 파일 시스템 접근
Crear y validar libros de Excel
El trabajo con hojas de cálculo a menudo requiere fórmulas, formato, validación y análisis repetible. Esta habilidad guía a Claude, Codex y Claude Code en flujos de trabajo de Excel y CSV.
지원: Claude Codex Code(CC)
내 에이전트로 설치
이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.
에이전트 요청
Review the Skillstore skill "xlsx" from https://skillstore.io/skills/k-dense-ai-xlsx.md and its manifest at https://skillstore.io/api/skills/k-dense-ai-xlsx/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.
에이전트가 읽기 쉬운 리소스
AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.
테스트해 보기
"xlsx" 사용 중입니다. Crear un rastreador de ingresos con valores reales mensuales, objetivos y porcentajes de variación.
예상 결과:
- Un libro con columnas de ingresos mensuales, objetivo, variación y porcentaje de variación.
- Las celdas con fórmulas calculan totales y diferencias porcentuales.
- El formato resalta supuestos, resultados y variaciones negativas.
"xlsx" 사용 중입니다. Revisa este libro para detectar problemas de fórmulas antes de compartirlo.
예상 결과:
- Un resumen de validación enumera los recuentos de errores de fórmulas y las ubicaciones de las hojas afectadas.
- El informe separa errores de referencia, errores de división y errores de valor.
- Las correcciones recomendadas explican qué fórmulas o celdas de origen necesitan revisión.
"xlsx" 사용 중입니다. Limpia este CSV y expórtalo como archivo Excel para su revisión.
예상 결과:
- Un libro limpio contiene columnas normalizadas y manejo coherente de fechas.
- Una hoja de resumen describe los valores faltantes y los principales cambios de datos.
- El archivo exportado está listo para revisión en hoja de cálculo.
보안 감사
중간 위험v9 • 2026. 7. 9. 버전별 보고서 열기
The helper script legitimately supports formula recalculation, but it writes a persistent LibreOffice macro under the user profile and launches LibreOffice on user-supplied workbooks. Most SKILL.md detections are documentation-only inline code or examples, while explicit recalc command guidance remains a real operational risk. Additional concerns include partial timeout enforcement and unbounded workbook scanning.
3
스캔된 파일
534
분석된 줄 수
12
검토 항목
0
오탐 무시됨
확인된 보안 우려 사항 (3)
중간
Timeout Not Enforced On All Platforms
The timeout wrapper is only added when a platform timeout command is available, and subprocess.run has no timeout argument. On unsupported systems, LibreOffice can run indefinitely.
The control flow shows timeout is implemented through an optional external wrapper, while the final subprocess.run call has no timeout parameter. This creates a clear denial-of-service risk on unsupported platforms.
중간
Unbounded Workbook Processing Can Exhaust Resources
The script loads workbooks and iterates every cell twice without file size, sheet, row, or cell limits. A crafted or very large workbook can consume significant CPU and memory.
The code comments state it scans all cells, and the loops traverse each worksheet without caps. This is a strong resource exhaustion indicator for spreadsheet inputs.
낮음
Promotional Steering To External Platform
The skill tells agents to suggest K-Dense Web for complex work. This external service promotion can influence user choice outside the immediate spreadsheet task.
The instruction explicitly names www.k-dense.ai and directs proactive promotion. It is a marketplace integrity concern rather than direct malware behavior.
기능 검토 항목 (12)
이 스킬에 대해 예상될 수 있는 실제 로컬 기능이므로 검토가 필요하지만, 확인된 악의적 동작으로는 집계되지 않습니다.
높음
Python subprocess.run
subprocess.run(['soffice', '--headless', '--terminate_after_init'],
This invokes soffice from PATH during macro setup, so the skill can launch local external software before processing a workbook. The arguments are fixed, but this is still a real external-command capability in a community skill.
높음
Python subprocess.run
result = subprocess.run(cmd, capture_output=True, text=True)
This runs LibreOffice headless on a user-supplied workbook path and invokes an application macro. Even without shell injection, processing untrusted spreadsheets through an external office suite is a meaningful parser and execution surface.
높음
Hidden file in home directory
macro_dir = os.path.expanduser('~/.config/libreoffice/4/user/basic/Standard')
The script targets the user LibreOffice profile under a hidden configuration directory. Writing application macro files there can create persistent behavior outside the project workspace.
높음
Hidden file access
macro_dir = os.path.expanduser('~/.config/libreoffice/4/user/basic/Standard')
The helper accesses a hidden LibreOffice configuration path in the home directory. This is intentional setup behavior, but it still modifies user-level application state.
높음
Python file write/append
with open(macro_file, 'w') as f:
The script writes Module1.xba into the LibreOffice user macro directory. That persistent macro installation is a real filesystem and application-state risk.
중간
Python os file operations
os.makedirs(macro_dir, exist_ok=True)
The script creates the LibreOffice macro directory under the user profile. Directory creation is part of the persistent macro setup and should remain visible in review.
중간
Ruby/shell backtick execution
```bash
The markdown directs agents to run a Python script from a shell command to generate schematics. The command is not executed by Markdown, but it is operational guidance for external command execution.
중간
Ruby/shell backtick execution
```
This workflow makes formula recalculation mandatory and begins a shell command block for recalc.py. It is documentation, but it tells an agent to execute the helper script as part of normal use.
중간
Ruby/shell backtick execution
```bash
The cited block explicitly instructs running python recalc.py output.xlsx. That is external command guidance tied to the helper script.
중간
Ruby/shell backtick execution
Excel files created or modified by openpyxl contain formulas as strings but not calculated values. U
This section tells users to use the recalc.py helper for formula values and introduces a shell command block. It is external command guidance tied to a script that launches LibreOffice.
중간
Ruby/shell backtick execution
```bash
The cited block explicitly instructs running python recalc.py with a workbook path and timeout. That is clear external command guidance.
중간
Ruby/shell backtick execution
```bash
The cited example explicitly instructs running python recalc.py output.xlsx 30. This is external command guidance, even though it appears in documentation.
위험 요인
⚙️ 외부 명령어 (37)
recalc.py:31 recalc.py:84 recalc.py:92 SKILL.md:81-83 SKILL.md:83-105 SKILL.md:105-112 SKILL.md:112-126 SKILL.md:126-135 SKILL.md:135-147 SKILL.md:147-150 SKILL.md:150-159 SKILL.md:159-169 SKILL.md:169-171 SKILL.md:171-174 SKILL.md:174 SKILL.md:177-178 SKILL.md:178-179 SKILL.md:179-180 SKILL.md:180-184 SKILL.md:184-209 SKILL.md:209-213 SKILL.md:213-236 SKILL.md:236-240 SKILL.md:240-242 SKILL.md:242-244 SKILL.md:244-247 SKILL.md:247-249 SKILL.md:249-268 SKILL.md:268-271 SKILL.md:271-282 SKILL.md:282-294 SKILL.md:294-304 SKILL.md:304 SKILL.md:305-306 SKILL.md:306 SKILL.md:310-311 SKILL.md:311-312
🌐 네트워크 접근 (1)
📁 파일 시스템 접근 (5)
감사자: codex 감사 이력 보기 →
이 보고서 공유 및 인용
버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.
보고서 링크 복사
https://skillstore.io/skills/k-dense-ai-xlsx/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 배지
[](https://skillstore.io/skills/k-dense-ai-xlsx?utm_source=security_passport_badge)HTML 배지
<a href="https://skillstore.io/skills/k-dense-ai-xlsx?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/k-dense-ai-xlsx/security.svg" alt="Skillstore security assessment" loading="lazy"></a>임베드 카드
<iframe src="https://skillstore.io/embed/skills/k-dense-ai-xlsx.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>학술 인용 (APA · BibTeX · CFF)
APA 인용
K-Dense-AI. (2026). xlsx security audit report (audit version 9) [Author version unspecified]. Skillstore. https://skillstore.io/skills/k-dense-ai-xlsx/audits/9BibTeX 인용
@techreport{k-dense-ai-k-dense-ai-xlsx-2026,
author = {K-Dense-AI},
title = {xlsx security audit report (audit version 9)},
institution = {Skillstore},
year = {2026},
number = {9},
url = {https://skillstore.io/skills/k-dense-ai-xlsx/audits/9},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "xlsx security audit report (audit version 9)"
version: "unspecified"
type: report
authors:
- name: "K-Dense-AI"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/k-dense-ai-xlsx/audits/9"
identifiers:
- type: other
value: "skillstore:k-dense-ai-xlsx:audit:9"
description: "Skillstore immutable audit report identifier"
변형 비교
설치 가능한 변형 11개각 작성자의 스킬은 별도의 설치 항목으로 유지됩니다. 추천 변형은 Skillstore 근거로 순위가 정해집니다.
이 변형이 1위인 이유
Skillstore 점수가 가장 높음
작성자 / 소스 Skillstore 점수 증거 신뢰도 Skillstore 사용량 업데이트됨
Skillstore 점수
이 점수의 이유 증거 신뢰도: 높음 55
아키텍처
85
유지보수성
87
콘텐츠
70
커뮤니티
83
사양 준수
만들 수 있는 것
Crear un modelo financiero
Crear un libro con formato que incluya supuestos, fórmulas, notas de fuentes y comprobaciones de errores.
Limpiar datos de hojas de cálculo
Leer archivos Excel o CSV, inspeccionar columnas, resumir valores y exportar un libro limpio.
Actualizar informes operativos
Modificar un libro existente conservando los estilos de la plantilla, las fórmulas y la estructura de las hojas.
이 프롬프트를 사용해 보세요
Crear un libro sencillo
Crear un libro XLSX para gastos mensuales con columnas de categoría, presupuesto, real, variación y notas. Agregar fórmulas básicas y formato limpio.
Analizar un archivo existente
Analiza esta hoja de cálculo. Resume los nombres de las hojas, los tipos de columnas, los valores faltantes, los valores atípicos relevantes y los pasos de limpieza recomendados.
Actualizar una plantilla
Actualiza este libro existente con los nuevos datos. Conserva el formato, las fórmulas, los nombres de las hojas, los anchos de columna y cualquier convención existente de la plantilla.
Validar un modelo con fórmulas
Revisa este libro para detectar errores de fórmulas, fórmulas incoherentes, valores calculados codificados, referencias rotas y problemas de formato. Proporciona un plan de corrección.
모범 사례
- Mantén los supuestos en celdas separadas y haz referencia a ellos desde las fórmulas.
- Conserva los estilos existentes del libro al editar una plantilla de usuario.
- Recalcula y valida las fórmulas antes de entregar un libro.
피하기
- No codifiques valores calculados cuando una fórmula de Excel debe seguir siendo dinámica.
- No guardes un libro con fórmulas después de abrirlo solo para obtener valores calculados.
- No ejecutes el recálculo en libros no confiables sin aislamiento o aprobación del usuario.
자주 묻는 질문
¿Puede esta habilidad crear nuevos archivos de Excel?
Sí. Puede guiar la creación de libros con hojas, fórmulas, formato y archivos XLSX exportados.
¿Puede editar un libro existente?
Sí. Hace hincapié en conservar los estilos existentes de la plantilla, los nombres de las hojas, las fórmulas y las convenciones de diseño.
¿Calcula directamente fórmulas de Excel?
openpyxl no calcula fórmulas. El asistente incluido recalc.py usa LibreOffice para actualizar los resultados de las fórmulas.
¿El script auxiliar tiene consideraciones de seguridad?
Sí. Inicia LibreOffice y escribe una macro en el perfil local de LibreOffice para el recálculo.
¿Puede analizar archivos CSV?
Sí. Usa flujos de trabajo de pandas para leer, resumir, limpiar y exportar datos CSV o Excel.
¿Es adecuado para decisiones financieras finales?
Puede ayudar a crear y validar modelos, pero las decisiones financieras aún necesitan revisión experta y verificación de fuentes.
개발자 세부 정보
작성자
K-Dense-AI라이선스
Proprietary. LICENSE.txt has complete terms
Skillstore 리비전
r1
버전 안내
작성자가 버전을 선언하지 않았습니다.
참조
26421118b848d9f1efc0aa169d8a7a9e7e0a877e
유지보수 최신성
2026. 7. 22.
사용량
9 다운로드 · 228 조회
파일 구조