{"id":"cmuxhqhdw04fxad0751cmfhga","slug":"xlsx","publicId":"c871d181-19a6-489d-932b-19907dca6623","name":"xlsx","description":"Use this skill any time a spreadsheet file is the primary input or output. This means any task where the user wants to: open, read, edit, or fix an existing .xlsx, .xlsm, .xltx, .csv, or .tsv file (e.g., adding columns, computing formulas, formatting, charting, cleaning messy data); create a new spreadsheet from scratch or from other data sources; or convert between tabular file formats. Trigger especially when the user references a spreadsheet file by name or path — even casually (like \"the xlsx in my downloads\") — and wants something done to it or produced from it. Also trigger for cleaning or restructuring messy tabular data files (malformed rows, misplaced headers, junk data) into proper spreadsheets. The deliverable must be a spreadsheet file. Do NOT trigger when the primary deliverable is a Word document, HTML report, standalone Python script, database pipeline, or Google Sheets API integration, even if tabular data is involved.","version":"","author":"anthropics","license":"Proprietary. LICENSE.txt has complete terms","compatibility":"","status":"completed","overallGrade":"B","scannerVersion":11,"fileCount":53,"hasSkillMd":true,"hasScripts":true,"hasReferences":false,"hasEvals":false,"hasAssets":false,"sourceType":"github","sourceUrl":"https://github.com/anthropics/skills/tree/main/skills/xlsx","createdAt":"2026-10-07T02:30:53.058Z","completedAt":"2026-10-07T02:30:53.055Z","visibility":"public","publishedAt":"2026-06-17T01:23:10.016Z","category":"","frameworks":[],"badgeStatus":"conditional","downloadCount":0,"verdictRationale":{"summary":"Skill has warnings: 1 warning in security or structure checks.","verdict":"warn","scanners":[{"source":"vettd","weight":1,"verdict":"warn"},{"source":"cisco","weight":0.8,"verdict":"pass"}],"consensus":"warn","warnTriggers":["Safety bypass flag detected"],"policyVersion":"consensus-v1","hardFailTriggers":[]},"verdictPolicyVersion":"consensus-v1","skillId":"cmqhdzzn700h9ad07a08aun9m","findings":[{"id":"cmuxhqhdw04fzad07xedl885e","source":"cisco","category":"security","label":"Bulk process environment snapshot can expose credentials and tokens","detail":"scripts/office/soffice.py:28 — Pattern detected: os.environ.copy(","severity":"medium","ruleId":"DATA_EXFIL_ENV_VARS","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"9cc158238592931e82b28a4c5743c2f7","filepath":"scripts/office/soffice.py"},{"id":"cmuxhqhdw04fyad07xk6ropmt","source":"vettd","category":"security","label":"Safety bypass flag detected","detail":"Detected in scripts/recalc.py:151 — `\"before saving, or pass --force to accept the loss. Charts and conditional \"`","severity":"low","ruleId":"VTD-0028","owaspLlmCategory":null,"intent":"negligent","chainId":null,"fingerprint":"5a7f0669b3f126aedade470c6eb8515f","filepath":"scripts/recalc.py"},{"id":"cmuxhqhdw04g0ad073q0nx3aa","source":"cisco","category":"security","label":"Script contacts a destination the documentation never mentions","detail":"scripts/office/validate.py:28 — Script contacts or configures 'schemas.openxmlformats.org' but the skill documentation never visibly mentions it. Undocumented network destinations can indicate behaviour the manifest and description do not disclose.","severity":"low","ruleId":"UNDECLARED_NETWORK_DESTINATION","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"46643345fc1ba78af601d93f8d6d2771","filepath":"scripts/office/validate.py"},{"id":"cmuxhqhdw04g1ad07kfm2hxnl","source":"cisco","category":"security","label":"Script contacts a destination the documentation never mentions","detail":"scripts/office/validators/docx.py:22 — Script contacts or configures 'schemas.microsoft.com' but the skill documentation never visibly mentions it. Undocumented network destinations can indicate behaviour the manifest and description do not disclose.","severity":"low","ruleId":"UNDECLARED_NETWORK_DESTINATION","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"2b9e9d0940d543827bb105c3a5d1016a","filepath":"scripts/office/validators/docx.py"},{"id":"cmuxhqhdw04g2ad07rjneaeto","source":"cisco","category":"security","label":"Script contacts a destination the documentation never mentions","detail":"scripts/recalc.py:32 — Script contacts or configures 'openoffice.org' but the skill documentation never visibly mentions it. Undocumented network destinations can indicate behaviour the manifest and description do not disclose.","severity":"low","ruleId":"UNDECLARED_NETWORK_DESTINATION","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"29b876ea025d03835f237ff89610c285","filepath":"scripts/recalc.py"}],"scannerRuns":[{"source":"cisco","status":"success","verdict":null,"grade":"B","findingCount":4,"criticalCount":0,"highCount":0},{"source":"vettd","status":"success","verdict":null,"grade":"A","findingCount":1,"criticalCount":0,"highCount":0}],"user":{"name":"Justin Pacella","image":"https://avatars.githubusercontent.com/u/97124458?v=4"},"repository":{"owner":"anthropics","name":"skills"},"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T18:58:41.345Z","lastVerifiedAt":"2026-10-21T18:58:41.345Z","lastChangeDetectedAt":"2026-08-14T13:56:28.657Z","scannedHash":"fe6471cc9b5b97aae0b576ccb92ffd9b0207589d","latestUpstreamHash":"fe6471cc9b5b97aae0b576ccb92ffd9b0207589d","nextCheckDueAt":"2026-10-22T17:14:30.007Z"},"signalCategories":[{"category":"safety","label":"Safety","form":"graded","verdict":null,"rows":[]},{"category":"reliability","label":"Reliability & Quality","form":"graded","verdict":null,"rows":[]},{"category":"performance","label":"Performance","form":"measured","verdict":{"form":"measured","magnitudes":[{"ruleId":"performance/static-context-tokens","label":"Static context tokens","value":1909,"unit":null,"method":"tiktoken/cl100k_base/skill-md-body"}]},"rows":[{"origin":"signal","id":"cmuxhqkxz04inad07kyj0tci5","subjectType":"skill_audit","subjectId":"cmuxhqhdw04fxad0751cmfhga","relatedType":"","relatedId":"","dataCategory":"performance","sourceClass":"scan","source":"vettd","ruleId":"performance/progressive-disclosure","severity":null,"label":"Progressive disclosure","detail":null,"valueNum":null,"valueText":"present","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:30:47.000Z","payload":null},{"origin":"signal","id":"cmuxhqhuy04gtad0750z4yzzj","subjectType":"skill_audit","subjectId":"cmuxhqhdw04fxad0751cmfhga","relatedType":"","relatedId":"","dataCategory":"performance","sourceClass":"scan","source":"vettd","ruleId":"performance/static-context-tokens","severity":null,"label":"Static context tokens","detail":null,"valueNum":1909,"valueText":null,"unit":null,"method":"tiktoken/cl100k_base/skill-md-body","derivation":null,"confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:30:47.000Z","payload":null}]},{"category":"cost","label":"Cost","form":"measured","verdict":null,"rows":[]},{"category":"compatibility","label":"Compatibility","form":"unjudged","verdict":{"form":"unjudged"},"rows":[{"origin":"signal","id":"cmuxhqlk304irad077o52qpee","subjectType":"skill_audit","subjectId":"cmuxhqhdw04fxad0751cmfhga","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/cli-help","severity":null,"label":"CLI help","detail":null,"valueNum":null,"valueText":"present","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:30:47.000Z","payload":null},{"origin":"signal","id":"cmuxhqhxh04gzad07013sfz9b","subjectType":"skill_audit","subjectId":"cmuxhqhdw04fxad0751cmfhga","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-environment-assumptions","severity":null,"label":"Declared environment assumptions","detail":null,"valueNum":null,"valueText":"","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:30:47.000Z","payload":null},{"origin":"signal","id":"cmuxhqis404hnad07dbvjmozh","subjectType":"skill_audit","subjectId":"cmuxhqhdw04fxad0751cmfhga","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-name","severity":null,"label":"Declared skill name","detail":null,"valueNum":null,"valueText":"xlsx","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:30:47.000Z","payload":null},{"origin":"signal","id":"cmuxhqm0j04itad077kib19x5","subjectType":"skill_audit","subjectId":"cmuxhqhdw04fxad0751cmfhga","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/structured-output","severity":null,"label":"Structured output","detail":null,"valueNum":null,"valueText":"present","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T02:30:47.000Z","payload":null}]},{"category":"sentiment","label":"Popularity","form":"unjudged","verdict":null,"rows":[]},{"category":"characteristics","label":"Characteristics","form":"unjudged","verdict":null,"rows":[]}],"signalCount":32,"publisherSupplied":["name","description","author","version","license"]}