A

Is xlsx safe?

anthropics/skills · scanned Oct 4, 2026

What it says it does

Use this skill any time a spreadsheet file is the primary input or output. This means any task where the user wants to: open, read, edit, or fix an existing .xlsx, .xlsm, .xltx, .csv, or .tsv file (e.g., adding columns, computing formulas, formatting, charting, cleaning messy data); create a new spreadsheet from scratch or from other data sources; or convert between tabular file formats. Trigger especially when the user references a spreadsheet file by name or path — even casually (like "the xlsx in my downloads") — and wants something done to it or produced from it. Also trigger for cleaning or restructuring messy tabular data files (malformed rows, misplaced headers, junk data) into proper spreadsheets. The deliverable must be a spreadsheet file. Do NOT trigger when the primary deliverable is a Word document, HTML report, standalone Python script, database pipeline, or Google Sheets API integration, even if tabular data is involved.

A
Score 96/100

No significant risks found by the automated scan.

Low · 6
Source
Repository
anthropics/skills/skills/xlsx
Commit
8a1541c4a3ff
Scanned
Oct 4, 2026
Files checked
40
Stars
180k
License
None declared
Last push
Oct 3, 2026
What it can reach
External domains mentioned anywhere in the skill's files.
openoffice.orgschemas.microsoft.comschemas.openxmlformats.orgwww.anthropic.comwww.w3.org
Findings (6)
Pattern matches are leads, not proof. A finding in documentation is often harmless; one in a script deserves a closer look.
LowRuns shell commandsCode execution

Many legitimate skills run commands. Check that the commands match what the skill says it does.

skills/xlsx/scripts/office/soffice.py:46

return subprocess.run(["soffice"] + args, env=get_soffice_env(), **kwargs)
LowRuns shell commandsCode execution

Many legitimate skills run commands. Check that the commands match what the skill says it does.

skills/xlsx/scripts/office/soffice.py:68

subprocess.run(
LowRuns shell commandsCode execution

Many legitimate skills run commands. Check that the commands match what the skill says it does.

skills/xlsx/scripts/office/validators/redlining.py:192

result = subprocess.run(
LowRuns shell commandsCode execution

Many legitimate skills run commands. Check that the commands match what the skill says it does.

skills/xlsx/scripts/office/validators/redlining.py:221

result = subprocess.run(
LowRuns shell commandsCode execution

Many legitimate skills run commands. Check that the commands match what the skill says it does.

skills/xlsx/scripts/recalc.py:43

subprocess.run(
LowRuns shell commandsCode execution

Many legitimate skills run commands. Check that the commands match what the skill says it does.

skills/xlsx/scripts/recalc.py:191

result = subprocess.run(
Files scanned (40)
  • skills/xlsx/LICENSE.txt (1.4 KB)
  • skills/xlsx/scripts/office/helpers/__init__.py (3.3 KB)
  • skills/xlsx/scripts/office/helpers/pptx_chart.py (5.7 KB)
  • skills/xlsx/scripts/office/helpers/pptx_slide.py (1.6 KB)
  • skills/xlsx/scripts/office/helpers/pptx_theme.py (3.4 KB)
  • skills/xlsx/scripts/office/schemas/ISO-IEC29500-4_2016/dml-chart.xsd (73.2 KB)
  • skills/xlsx/scripts/office/schemas/ISO-IEC29500-4_2016/dml-chartDrawing.xsd (6.8 KB)
  • skills/xlsx/scripts/office/schemas/ISO-IEC29500-4_2016/dml-diagram.xsd (50.1 KB)
  • skills/xlsx/scripts/office/schemas/ISO-IEC29500-4_2016/dml-lockedCanvas.xsd (624 B)
  • skills/xlsx/scripts/office/schemas/ISO-IEC29500-4_2016/dml-main.xsd (148.5 KB)
  • skills/xlsx/scripts/office/schemas/ISO-IEC29500-4_2016/dml-picture.xsd (1.2 KB)
  • skills/xlsx/scripts/office/schemas/ISO-IEC29500-4_2016/dml-spreadsheetDrawing.xsd (8.7 KB)
  • skills/xlsx/scripts/office/schemas/ISO-IEC29500-4_2016/dml-wordprocessingDrawing.xsd (14.4 KB)
  • skills/xlsx/scripts/office/schemas/ISO-IEC29500-4_2016/pml.xsd (81.7 KB)
  • skills/xlsx/scripts/office/schemas/ISO-IEC29500-4_2016/shared-additionalCharacteristics.xsd (1.2 KB)
  • skills/xlsx/scripts/office/schemas/ISO-IEC29500-4_2016/shared-bibliography.xsd (7.2 KB)
  • skills/xlsx/scripts/office/schemas/ISO-IEC29500-4_2016/shared-commonSimpleTypes.xsd (6.2 KB)
  • skills/xlsx/scripts/office/schemas/ISO-IEC29500-4_2016/shared-customXmlDataProperties.xsd (1.2 KB)
  • skills/xlsx/scripts/office/schemas/ISO-IEC29500-4_2016/shared-customXmlSchemaProperties.xsd (880 B)
  • skills/xlsx/scripts/office/schemas/ISO-IEC29500-4_2016/shared-documentPropertiesCustom.xsd (2.5 KB)
  • skills/xlsx/scripts/office/schemas/ISO-IEC29500-4_2016/shared-documentPropertiesExtended.xsd (3.4 KB)
  • skills/xlsx/scripts/office/schemas/ISO-IEC29500-4_2016/shared-documentPropertiesVariantTypes.xsd (7.3 KB)
  • skills/xlsx/scripts/office/schemas/ISO-IEC29500-4_2016/shared-math.xsd (22.8 KB)
  • skills/xlsx/scripts/office/schemas/ISO-IEC29500-4_2016/shared-relationshipReference.xsd (1.3 KB)
  • skills/xlsx/scripts/office/schemas/ISO-IEC29500-4_2016/sml.xsd (236.6 KB)
  • skills/xlsx/scripts/office/schemas/ISO-IEC29500-4_2016/vml-main.xsd (25.5 KB)
  • skills/xlsx/scripts/office/schemas/ISO-IEC29500-4_2016/vml-officeDrawing.xsd (24.7 KB)
  • skills/xlsx/scripts/office/schemas/ISO-IEC29500-4_2016/vml-presentationDrawing.xsd (535 B)
  • skills/xlsx/scripts/office/schemas/ISO-IEC29500-4_2016/vml-spreadsheetDrawing.xsd (5.6 KB)
  • skills/xlsx/scripts/office/schemas/ISO-IEC29500-4_2016/vml-wordprocessingDrawing.xsd (3.9 KB)
  • skills/xlsx/scripts/office/schemas/ISO-IEC29500-4_2016/wml.xsd (167.4 KB)
  • skills/xlsx/scripts/office/soffice.py (5.8 KB)
  • skills/xlsx/scripts/office/validate.py (6.0 KB)
  • skills/xlsx/scripts/office/validators/__init__.py (336 B)
  • skills/xlsx/scripts/office/validators/base.py (33.0 KB)
  • skills/xlsx/scripts/office/validators/docx.py (17.1 KB)
  • skills/xlsx/scripts/office/validators/pptx.py (15.6 KB)
  • skills/xlsx/scripts/office/validators/redlining.py (11.0 KB)
  • skills/xlsx/scripts/recalc.py (10.4 KB)
  • skills/xlsx/SKILL.md (8.4 KB)
Add the badge to your README
Shows the current grade and links back to this report. It updates when the skill is rescanned.
SkillsVetted grade A
[![SkillsVetted grade](https://skillsvetted.com/badge/anthropics/xlsx.svg)](https://skillsvetted.com/skills/anthropics/xlsx)
Rescan
Pull the latest commit from GitHub and update this listing.
Want a human to check it?

A full review covers what pattern matching can't: intent, logic and behavior in a sandbox.

Request full review