Xlsx Anthropic

Use this skill any time a spreadsheet file is the primary input or output. This means any task where the user wants to: open, read, edit, or fix an existing...

This skill appears to implement spreadsheet unpack/pack/validation workflows and includes code to support LibreOffice-based formula recalculation, but it does several things you should explicitly accept before running it: 1) it assumes 'soffice' (LibreOffice) and will attempt to compile a C shim using 'gcc' if the environment blocks AF_UNIX sockets — ensure you have or want these system tools available; 2) it writes temporary C source and a compiled shared object and uses LD_PRELOAD when launching LibreOffice — compiling native code and using LD_PRELOAD can be sensitive, so only run in a trusted or sandboxed environment; 3) the skill metadata does not declare these dependencies (incoherent documentation), and the LICENSE language is restrictive about extracting/retaining materials despite source being packaged — confirm licensing is acceptable; 4) if you need stricter guarantees, ask the publisher to (a) explicitly list required binaries (soffice, gcc), (b) document the runtime compilation and LD_PRELOAD usage, or (c) provide a configuration option to skip the shim and rely on a preinstalled LibreOffice. If you cannot verify the author or do not want native compilation/LD_PRELOAD on your host, do not install or run this skill outside a dedicated sandbox.

Type: OpenClaw Skill Name: xlsx-anthropic Version: 1.0.0 The skill bundle contains highly irregular and high-risk behaviors, specifically the on-the-fly compilation of a C-based shim and the use of LD_PRELOAD to intercept system calls (socket, listen, accept) to bypass sandbox restrictions (scripts/office/soffice.py). Additionally, it performs application-level modification by writing a StarBasic macro to the user's LibreOffice configuration directory to facilitate formula recalculation (scripts/recalc.py). While these actions are functionally justified within the documentation to enable LibreOffice in restricted environments, the combination of dynamic code execution, system call shimming, and configuration persistence represents a significant attack surface and behavior typically associated with evasion or advanced persistence.