Security risk report for @forgecat/openai_skills_spreadsheet v0.0.10
Source Integrity
Low
Profile is attributed to OpenAI with a public GitHub repository link and commit hash.
Metadata (author, license, version) is transparent and traceable to a legitimate open-source project.
Agent Intent
Low
Content describes legitimate spreadsheet workflows (create, edit, analyze, format) with no instructions to manipulate the AI or hide its behavior.
Skill guidance recommends standard Python libraries (openpyxl, pandas) and system tools (LibreOffice, Poppler) — all well-known, legitimate packages with no typosquatting or backdoor patterns.
Instructions to 'not expose' internal spreadsheet tools in user-facing explanations is a reasonable operational guideline, not a directive to hide system prompts or exfiltrate data.
Details
Evidence
'Use formulas for derived values instead of hardcoding results.'
'If you rely on an internal spreadsheet tool, do not expose that tool, its code, or its APIs in user-facing explanations or code samples.' — operational transparency, not system prompt leakage.
'IMPORTANT: System and user instructions always take precedence.' — defers to legitimate authority, no role hijack.
Permissions
Low
No tools or hooks are declared in the profile; this is a skill definition (markdown guidance) only.
Recommended operations (file I/O for spreadsheets, temporary file cleanup, rendering via system tools) are narrowly scoped to the stated purpose.
Guidance to use `tmp/spreadsheets/` and `output/spreadsheet/` directories and clean up intermediate files demonstrates responsible file management.
Details
Evidence
'Use `tmp/spreadsheets/` for intermediate files; delete them when done.'
'Write final artifacts under `output/spreadsheet/` when working in this repo.'
No shell, file_delete, or network tools requested; only library recommendations.
MCP Risk
Low
No MCP servers are defined in the profile.
No hidden instructions in tool descriptions or arbitrary binary execution.
Profile is a skill definition (markdown + metadata) with no server configuration.
ForgeCat