Skywork Excel

SUSPICIOUS: The skill’s core capabilities mostly fit its Excel/report purpose, but it routes user files, queries, and auth tokens through opaque bundled clients to a remote backend and may publish outputs to OSS links. This looks more like a high-trust hosted integration than clear malware, but the remote data flow, token-file usage, and server-side web/document processing make it medium risk.