Skywork Excel

SUSPICIOUS: the skill’s overall purpose is coherent for a cloud Excel/reporting assistant, but it routes user queries, uploaded files, and auth tokens through a remote backend with limited transparency, and it enables broad external-content processing. No clear malware indicators or deceptive installer chain are present, but the data exposure and prompt-injection surface make it a medium-risk skill.