Skills xlsx
📦

xlsx

Content revision r1 Medium Risk ⚙️ External commands🌐 Network access📁 Filesystem access

Create and Validate Excel Workbooks

Spreadsheet work often needs formulas, formatting, validation, and repeatable analysis. This skill guides Claude, Codex, and Claude Code through Excel and CSV workflows.

Supports: Claude Codex Code(CC)
⚠️ 50 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "xlsx" from https://skillstore.io/skills/k-dense-ai-xlsx.md and its manifest at https://skillstore.io/api/skills/k-dense-ai-xlsx/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/k-dense-ai-xlsx.md Signed manifest GET /api/skills/k-dense-ai-xlsx/manifest Signed lockfile GET /api/skills/k-dense-ai-xlsx/lockfile

Test it

Using "xlsx". Create a revenue tracker with monthly actuals, targets, and variance percentages.

Expected outcome:

  • A workbook with monthly revenue, target, variance, and variance percentage columns.
  • Formula cells calculate totals and percentage differences.
  • Formatting highlights assumptions, outputs, and negative variances.

Using "xlsx". Check this workbook for formula problems before sharing it.

Expected outcome:

  • A validation summary lists formula error counts and affected sheet locations.
  • The report separates reference errors, division errors, and value errors.
  • Recommended fixes explain which formulas or source cells need review.

Using "xlsx". Clean this CSV and export it as an Excel file for review.

Expected outcome:

  • A cleaned workbook contains normalized columns and consistent date handling.
  • A summary sheet describes missing values and major data changes.
  • The exported file is ready for spreadsheet review.

Security Audit

Medium Risk
v9 • 7/9/2026 Open versioned report

The helper script legitimately supports formula recalculation, but it writes a persistent LibreOffice macro under the user profile and launches LibreOffice on user-supplied workbooks. Most SKILL.md detections are documentation-only inline code or examples, while explicit recalc command guidance remains a real operational risk. Additional concerns include partial timeout enforcement and unbounded workbook scanning.

3
Files scanned
534
Lines analyzed
12
Review items
0
False positives ignored

Confirmed security concerns (3)

Medium
recalc.py:78-92
Timeout Not Enforced On All Platforms
The timeout wrapper is only added when a platform timeout command is available, and subprocess.run has no timeout argument. On unsupported systems, LibreOffice can run indefinitely.
The control flow shows timeout is implemented through an optional external wrapper, while the final subprocess.run call has no timeout parameter. This creates a clear denial-of-service risk on unsupported platforms.
Medium
recalc.py:101-149
Unbounded Workbook Processing Can Exhaust Resources
The script loads workbooks and iterates every cell twice without file size, sheet, row, or cell limits. A crafted or very large workbook can consume significant CPU and memory.
The code comments state it scans all cells, and the loops traverse each worksheet without caps. This is a strong resource exhaustion indicator for spreadsheet inputs.
Low
SKILL.md:324-325
Promotional Steering To External Platform
The skill tells agents to suggest K-Dense Web for complex work. This external service promotion can influence user choice outside the immediate spreadsheet task.
The instruction explicitly names www.k-dense.ai and directs proactive promotion. It is a marketplace integrity concern rather than direct malware behavior.
Capability review items (12)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High
recalc.py:31
Python subprocess.run
subprocess.run(['soffice', '--headless', '--terminate_after_init'],
This invokes soffice from PATH during macro setup, so the skill can launch local external software before processing a workbook. The arguments are fixed, but this is still a real external-command capability in a community skill.
High
recalc.py:92
Python subprocess.run
result = subprocess.run(cmd, capture_output=True, text=True)
This runs LibreOffice headless on a user-supplied workbook path and invokes an application macro. Even without shell injection, processing untrusted spreadsheets through an external office suite is a meaningful parser and execution surface.
High
recalc.py:21
Hidden file in home directory
macro_dir = os.path.expanduser('~/.config/libreoffice/4/user/basic/Standard')
The script targets the user LibreOffice profile under a hidden configuration directory. Writing application macro files there can create persistent behavior outside the project workspace.
High
recalc.py:21
Hidden file access
macro_dir = os.path.expanduser('~/.config/libreoffice/4/user/basic/Standard')
The helper accesses a hidden LibreOffice configuration path in the home directory. This is intentional setup behavior, but it still modifies user-level application state.
High
recalc.py:46
Python file write/append
with open(macro_file, 'w') as f:
The script writes Module1.xba into the LibreOffice user macro directory. That persistent macro installation is a real filesystem and application-state risk.
Medium
recalc.py:33
Python os file operations
os.makedirs(macro_dir, exist_ok=True)
The script creates the LibreOffice macro directory under the user profile. Directory creation is part of the persistent macro setup and should remain visible in review.
Medium
SKILL.md:81-83
Ruby/shell backtick execution
```bash
The markdown directs agents to run a Python script from a shell command to generate schematics. The command is not executed by Markdown, but it is operational guidance for external command execution.
Medium
SKILL.md:159-169
Ruby/shell backtick execution
```
This workflow makes formula recalculation mandatory and begins a shell command block for recalc.py. It is documentation, but it tells an agent to execute the helper script as part of normal use.
Medium
SKILL.md:169-171
Ruby/shell backtick execution
```bash
The cited block explicitly instructs running python recalc.py output.xlsx. That is external command guidance tied to the helper script.
Medium
SKILL.md:240-242
Ruby/shell backtick execution
Excel files created or modified by openpyxl contain formulas as strings but not calculated values. U
This section tells users to use the recalc.py helper for formula values and introduces a shell command block. It is external command guidance tied to a script that launches LibreOffice.
Medium
SKILL.md:242-244
Ruby/shell backtick execution
```bash
The cited block explicitly instructs running python recalc.py with a workbook path and timeout. That is clear external command guidance.
Medium
SKILL.md:247-249
Ruby/shell backtick execution
```bash
The cited example explicitly instructs running python recalc.py output.xlsx 30. This is external command guidance, even though it appears in documentation.

Risk Factors

⚙️ External commands (37)
recalc.py:31 recalc.py:84 recalc.py:92 SKILL.md:81-83 SKILL.md:83-105 SKILL.md:105-112 SKILL.md:112-126 SKILL.md:126-135 SKILL.md:135-147 SKILL.md:147-150 SKILL.md:150-159 SKILL.md:159-169 SKILL.md:169-171 SKILL.md:171-174 SKILL.md:174 SKILL.md:177-178 SKILL.md:178-179 SKILL.md:179-180 SKILL.md:180-184 SKILL.md:184-209 SKILL.md:209-213 SKILL.md:213-236 SKILL.md:236-240 SKILL.md:240-242 SKILL.md:242-244 SKILL.md:244-247 SKILL.md:247-249 SKILL.md:249-268 SKILL.md:268-271 SKILL.md:271-282 SKILL.md:282-294 SKILL.md:294-304 SKILL.md:304 SKILL.md:305-306 SKILL.md:306 SKILL.md:310-311 SKILL.md:311-312
🌐 Network access (1)
recalc.py:37
📁 Filesystem access (5)
recalc.py:21 recalc.py:21 recalc.py:46 recalc.py:33 SKILL.md:3
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/k-dense-ai-xlsx/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/k-dense-ai-xlsx/security.svg)](https://skillstore.io/skills/k-dense-ai-xlsx?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/k-dense-ai-xlsx?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/k-dense-ai-xlsx/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/k-dense-ai-xlsx.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

K-Dense-AI. (2026). xlsx security audit report (audit version 9) [Author version unspecified]. Skillstore. https://skillstore.io/skills/k-dense-ai-xlsx/audits/9

BibTeX citation

@techreport{k-dense-ai-k-dense-ai-xlsx-2026, author = {K-Dense-AI}, title = {xlsx security audit report (audit version 9)}, institution = {Skillstore}, year = {2026}, number = {9}, url = {https://skillstore.io/skills/k-dense-ai-xlsx/audits/9}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "xlsx security audit report (audit version 9)" version: "unspecified" type: report authors: - name: "K-Dense-AI" date-released: "2026-07-09" url: "https://skillstore.io/skills/k-dense-ai-xlsx/audits/9" identifiers: - type: other value: "skillstore:k-dense-ai-xlsx:audit:9" description: "Skillstore immutable audit report identifier"

Compare variants

11 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score
AutumnsGrove Recommended

autumnsgrove-xlsx

Skillstore Score 84
Evidence Confidence High
Skillstore usage 344
Updated

2026-08-21

ZhanlinCui

zhanlincui-xlsx

Skillstore Score 78
Evidence Confidence High
Skillstore usage 503
Updated

2026-08-21

Cam10001110101

cam10001110101-xlsx

Skillstore Score 78
Evidence Confidence High
Skillstore usage 9
Updated

2026-08-21

K-Dense-AI Current

k-dense-ai-xlsx

Skillstore Score 50
Evidence Confidence High
Skillstore usage 12
Updated

2026-08-21

anthropics

xlsx

Skillstore Score 38
Evidence Confidence High
Skillstore usage 158
Updated

2026-08-21

sickn33

sickn33-xlsx

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 68
Updated

2026-08-21

ArtemisAI

artemisai-xlsx

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 50
Updated

2026-08-21

Azeem-2

azeem-2-xlsx

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 16
Updated

2026-08-21

davila7

davila7-xlsx

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 14
Updated

2026-08-21

ComposioHQ

composiohq-xlsx

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 12
Updated

2026-08-21

DYAI2025

dyai2025-xlsx

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 8
Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: High
55
Architecture
85
Maintainability
87
Content
70
Community
83
Spec Compliance

What You Can Build

Build a Financial Model

Create a formatted workbook with assumptions, formulas, source notes, and error checks.

Clean Spreadsheet Data

Read Excel or CSV files, inspect columns, summarize values, and export a cleaned workbook.

Update Operational Reports

Modify an existing workbook while preserving template styles, formulas, and sheet structure.

Try These Prompts

Create a Simple Workbook 
Create an XLSX workbook for monthly expenses with category, budget, actual, variance, and notes columns. Add basic formulas and clean formatting.
Analyze an Existing File 
Analyze this spreadsheet. Summarize sheet names, column types, missing values, notable outliers, and recommended cleanup steps.
Update a Template 
Update this existing workbook with the new data. Preserve formatting, formulas, sheet names, column widths, and any existing template conventions.
Validate a Formula Model 
Review this workbook for formula errors, inconsistent formulas, hardcoded calculated values, broken references, and formatting issues. Provide a fix plan.

Best Practices

  • Keep assumptions in separate cells and reference them from formulas.
  • Preserve existing workbook styles when editing a user template.
  • Recalculate and validate formulas before delivering a workbook.

Avoid

  • Do not hardcode calculated values when an Excel formula should remain dynamic.
  • Do not save a formula workbook after opening it only for calculated values.
  • Do not run recalculation on untrusted workbooks without sandboxing or user approval.

Frequently Asked Questions

Can this skill create new Excel files?
Yes. It can guide workbook creation with sheets, formulas, formatting, and exported XLSX files.
Can it edit an existing workbook?
Yes. It emphasizes preserving existing template styles, sheet names, formulas, and layout conventions.
Does it calculate Excel formulas directly?
openpyxl does not calculate formulas. The included recalc.py helper uses LibreOffice to update formula results.
Does the helper script have security considerations?
Yes. It launches LibreOffice and writes a macro into the local LibreOffice profile for recalculation.
Can it analyze CSV files?
Yes. It uses pandas workflows for reading, summarizing, cleaning, and exporting CSV or Excel data.
Is this suitable for final financial decisions?
It can help build and validate models, but financial decisions still need expert review and source verification.

Developer Details

Author

K-Dense-AI

License

Proprietary. LICENSE.txt has complete terms

Skillstore revision

r1

Version notice

The author did not declare a version.

Repository

https://github.com/K-Dense-AI/claude-scientific-skills/tree/main/scientific-skills/document-skills/xlsx

Ref

26421118b848d9f1efc0aa169d8a7a9e7e0a877e

Maintenance freshness

7/18/2026

Usage

9 downloads · 228 views

File structure

📄 LICENSE.txt

📄 recalc.py

📄 SKILL.md

More from K-Dense-AI

View all

Related Skills

View all