Skills xlsx
๐Ÿ“ฆ

xlsx

Content revision r1 Safe โš™๏ธ External commands๐ŸŒ Network access๐Ÿ“ Filesystem access

Build Reliable Excel Workbooks

Spreadsheet tasks often require formulas, formatting, and validation across Excel files. This skill guides Claude, Codex, and Claude Code through XLSX creation, editing, analysis, and recalculation.

Supports: Claude Codex Code(CC)
๐Ÿฅ‰ 78 Bronze

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "xlsx" from https://skillstore.io/skills/zhanlincui-xlsx.md and its manifest at https://skillstore.io/api/skills/zhanlincui-xlsx/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Test it

Using "xlsx". Create a sales tracker workbook with monthly totals and growth rates.

Expected outcome:

  • Workbook includes Monthly Sales, Summary, and Assumptions sheets.
  • Totals and growth rates use Excel formulas.
  • Headers, currency formats, and highlighted inputs are applied.

Using "xlsx". Analyze a workbook and identify formula problems after editing.

Expected outcome:

The response summarizes formula count, detected error types, affected sheet locations, and recommended fixes.

Using "xlsx". Update a financial model template with a new scenario case.

Expected outcome:

The workbook preserves existing styles, adds the requested scenario, links formulas to assumptions, and notes key changes.

Security Audit

Safe
v4 โ€ข 7/8/2026 Open versioned report

Confirmed findings are limited to recalc.py filesystem side effects that create and write a LibreOffice macro under the user application config directory, plus external execution of LibreOffice and timeout tools from PATH. The hardcoded URL is only an XML namespace, and the SKILL.md shell detections are markdown and code-fence false positives. No prompt injection, data exfiltration intent, or unauthorized network behavior was found.

2
Files scanned
467
Lines analyzed
7
Review items
0
False positives ignored
Capability review items (7)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High
Python subprocess.run
subprocess.run(['soffice', '--headless', '--terminate_after_init'],
The helper launches soffice from PATH to initialize LibreOffice. The command is hardcoded and shell=False, but it still executes a local binary as a side effect of skill use.
High
Python subprocess.run
subprocess.run(['gtimeout', '--version'], capture_output=True, timeout=1, check=False)
The helper probes gtimeout by executing a PATH-resolved binary. There is no shell injection, but external command execution remains a real local execution risk.
High
Python subprocess.run
result = subprocess.run(cmd, capture_output=True, text=True)
The script invokes LibreOffice with a user-selected workbook path and a macro URL. Arguments are passed as a list, but the command opens and saves local files through an external application.
High
Hidden file in home directory
macro_dir = os.path.expanduser('~/.config/libreoffice/4/user/basic/Standard')
The script targets the user LibreOffice profile under ~/.config. Writing persistent macro files in hidden application configuration is a real security-sensitive side effect.
Medium
Hidden file access
macro_dir = os.path.expanduser('~/.config/libreoffice/4/user/basic/Standard')
The script accesses the hidden LibreOffice user configuration directory. The purpose is setup, but hidden profile access can affect future LibreOffice behavior.
Medium
Python file write/append
with open(macro_file, 'w') as f:
The script writes Module1.xba into the LibreOffice macro directory. The content is static, but writing a macro file is a persistent filesystem modification.
Medium
Python os file operations
os.makedirs(macro_dir, exist_ok=True)
The script creates the LibreOffice macro directory in the user profile if missing. This is expected setup behavior but still modifies user application configuration.
Audited by: codex View Audit History โ†’
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/zhanlincui-xlsx/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/zhanlincui-xlsx/security.svg)](https://skillstore.io/skills/zhanlincui-xlsx?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/zhanlincui-xlsx?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/zhanlincui-xlsx/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/zhanlincui-xlsx.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA ยท BibTeX ยท CFF)

APA citation

ZhanlinCui. (2026). xlsx security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/zhanlincui-xlsx/audits/4

BibTeX citation

@techreport{zhanlincui-zhanlincui-xlsx-2026, author = {ZhanlinCui}, title = {xlsx security audit report (audit version 4)}, institution = {Skillstore}, year = {2026}, number = {4}, url = {https://skillstore.io/skills/zhanlincui-xlsx/audits/4}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "xlsx security audit report (audit version 4)" version: "unspecified" type: report authors: - name: "ZhanlinCui" date-released: "2026-07-08" url: "https://skillstore.io/skills/zhanlincui-xlsx/audits/4" identifiers: - type: other value: "skillstore:zhanlincui-xlsx:audit:4" description: "Skillstore immutable audit report identifier"

Compare variants

11 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score
AutumnsGrove Recommended

autumnsgrove-xlsx

Skillstore Score 84
Evidence Confidence High
Skillstore usage 344
Updated

2026-08-21

ZhanlinCui Current

zhanlincui-xlsx

Skillstore Score 78
Evidence Confidence High
Skillstore usage 503
Updated

2026-08-21

cam10001110101-xlsx

Skillstore Score 78
Evidence Confidence High
Skillstore usage 9
Updated

2026-08-21

k-dense-ai-xlsx

Skillstore Score 50
Evidence Confidence High
Skillstore usage 12
Updated

2026-08-21

Skillstore Score 38
Evidence Confidence High
Skillstore usage 158
Updated

2026-08-21

sickn33-xlsx

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 68
Updated

2026-08-21

artemisai-xlsx

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 50
Updated

2026-08-21

azeem-2-xlsx

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 16
Updated

2026-08-21

davila7-xlsx

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 14
Updated

2026-08-21

composiohq-xlsx

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 12
Updated

2026-08-21

dyai2025-xlsx

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 8
Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: High
55
Architecture
85
Maintainability
87
Content
77
Community
83
Spec Compliance

What You Can Build

Create financial model workbooks

Build Excel models with assumption cells, formulas, financial formatting, and documented hardcoded inputs.

Analyze spreadsheet data

Read workbook data, summarize columns, clean sheets, and export analysis results to a new file.

Update recurring reports

Modify existing report templates while preserving formulas, styles, worksheets, and workbook conventions.

Try These Prompts

Create a Workbook
Create an XLSX file with sheets for [purpose], include formulas for [calculations], and apply clear headers and number formats.
Analyze Spreadsheet Data
Read [file.xlsx], summarize key columns, identify missing values, and create a cleaned workbook with findings.
Edit an Existing Template
Open [template.xlsx], preserve existing formatting, add [new section], and update formulas without replacing linked cells.
Build and Validate a Model
Create a multi-sheet model for [business case], use assumption cells, apply financial formatting, recalculate formulas, and report any Excel errors.

Best Practices

  • Keep assumptions in separate cells and reference them from formulas.
  • Recalculate and review formula errors before sharing edited workbooks.
  • Preserve existing workbook conventions when modifying templates.

Avoid

  • Hardcoding calculated values that should remain dynamic formulas.
  • Saving a data-only workbook after formulas have been replaced by values.
  • Changing template formatting without checking existing workbook standards.

Frequently Asked Questions

Can this skill create new Excel files?
Yes. It provides workflows for creating XLSX files with worksheets, formulas, formatting, and saved outputs.
Can it edit existing workbooks?
Yes. It guides edits with openpyxl while preserving formulas, styles, worksheets, and template conventions.
Does formula recalculation require extra software?
Yes. The included recalculation workflow requires LibreOffice to run locally.
Can it analyze spreadsheet data?
Yes. It recommends pandas for reading, summarizing, cleaning, and exporting workbook data.
Does it support financial models?
Yes. It includes guidance for assumptions, formulas, color coding, number formats, and documented inputs.
Will it detect every possible Excel problem?
No. It checks common formula errors, but users should review model logic and source assumptions manually.

Developer Details

Author

ZhanlinCui

License

Proprietary. LICENSE.txt has complete terms

Skillstore revision

r1

Version notice

The author did not declare a version.

Ref

88a205c7f635a966e31156313b590d59007c5caa

Maintenance freshness

7/18/2026

Usage

491 downloads ยท 244 views

File structure

๐Ÿ“„ recalc.py

๐Ÿ“„ SKILL.md

More from ZhanlinCui

View all
View all