excel-cli

What the source does

• FilesystemNone observedNo reads or writes in the source
• NetworkNone observedNo outbound calls in the source
• ShellNone observedNo commands run in the source
• DependenciesPinnedNothing floats
• SecretsNone foundNo keys in source

Five audit layers

Gates applied: no behavioural pass.

Audit 0.4.1 · source sha 87db59ef49ed · 20 Oct 2026Report an issue or request a re-scan

• Publishersbroenne GitHub userOwner of the repository this skill is read from
• Source foldersbroenne/mcp-server-excel/skills/excel-cliThe exact folder we audited
• LicenceMITAs the repository states it
• Commit pinned for this verdict87db59ef49edA new audit runs when the source changes
• Repository statusNot archivedPushed today
• Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

Its description: Discover and launch the Excel CLI for ordinary Excel workbook requests on Windows, including reads, writes, formulas, data refreshes, and workbook automation. Use the installed excel-cli plugin's npx launcher and native…

---
name: excel-cli
description: >-
  Discover and launch the Excel CLI for ordinary Excel workbook requests on
  Windows, including reads, writes, formulas, data refreshes, and workbook
  automation. Use the installed excel-cli plugin's npx launcher and native help
  to find commands; report presentation conventions are a separate optional skill.
compatibility: Windows with desktop Excel, PowerShell 7.4 or later, Node.js 18 or later, and the excel-cli plugin.
---

# Excel CLI discovery

The plugin does not place `excelcli` on PATH. Its launcher runs
`npx -y @sbroenne/excelcli@latest`; do not assume a standalone executable is
installed or restore the retired GitHub-release downloader.

For the plugin-bundled copy of this skill, `..\..\bin\start-cli.ps1` relative to
the directory containing this `SKILL.md` locates the plugin launcher.
Replace `<plugin-root>` below with that plugin's actual installed directory:
Run these commands in PowerShell 7.4 or later (`pwsh`), not Windows PowerShell 5.1.

```powershell
& "<plugin-root>\bin\start-cli.ps1" --help
& "<plugin-root>\bin\start-cli.ps1" session --help
```

Use the same full launcher path for subsequent commands, especially quoted JSON
arguments. Discover exact command names, flags, defaults,
and save/close behavior through native `--help`; do not invent syntax.

Inspect the existing workbook state relevant to the request. Preserve unrelated
contents and save only the authorized result. If an operation fails, inspect its
reported partial state rather than assuming rollback or automatically cleaning up.
For JSON errors, read `errorMessage` as the single error-text field; use
`errorCategory` when present to guide recovery.
Load `excel-cli-report-formatting` only for requested report presentation, not
ordinary Excel reads or targeted updates.

Excerpt, first 1,816 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

git clone https://github.com/sbroenne/mcp-server-excel
git -C mcp-server-excel checkout 87db59ef49ed

Works in

1. 2026-10-20
   ✓SAFE B 89 / 100

   first audit · source 87db59ef49ed

Questions about excel-cli

• github.com/sbroenne/mcp-server-excel/tree/main/skills/excel-cli — the audited source at commit 87db59ef49ed and every finding aboveObserved · 20 Oct 2026

Spotted something wrong? Report a correction · Methodology