Excel
Native OpenClaw Excel plugin for local XLSX inspection and row editing
Community code plugin. Review compatibility and verification before install.
excel · runtime id excel
Install
openclaw plugins install clawhub:excelLatest Release
Version 0.1.0
Compatibility
{
"builtWithOpenClawVersion": "2026.3.23-2",
"pluginApiRange": ">=2026.3.23"
}Capabilities
{
"bundledSkills": [],
"capabilityTags": [
"executes-code"
],
"channels": [],
"commandNames": [],
"configSchema": true,
"configUiHints": false,
"executesCode": true,
"hooks": [],
"httpRouteCount": 0,
"materializesDependencies": false,
"providers": [],
"runtimeId": "excel",
"serviceNames": [],
"setupEntry": false,
"toolNames": []
}Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name, description, README, openclaw manifest, and code all match: the package reads and writes local .xlsx files, lists sheets, pages rows, replaces or appends sheets. Required capabilities (filesystem access) are proportionate to the stated purpose.
Instruction Scope
SKILL.md and skills/excel/SKILL.md instruct only to install/build the plugin and to use the excel_* tools against local .xlsx files. The runtime instructions and code operate only on local filesystem paths and do not reference external endpoints, unrelated files, or broad system data collection.
Install Mechanism
No install spec pulling remote archives is present; code is bundled in the package and dependencies are standard npm packages (openclaw, xlsx, typebox). There are no URL downloads or extract steps from arbitrary hosts in the manifest.
Credentials
The skill requires no environment variables or credentials. The code only reads process.env.HOME to expand ~ in paths — this is reasonable for resolving user paths and is documented via the defaultDirectory config.
Persistence & Privilege
skills/excel/SKILL.md contains YAML metadata with {"openclaw":{"always":true}} which would force the skill to be included in every agent run; registry metadata for the skill lists always: false. This discrepancy gives the plugin elevated persistence if the SKILL.md metadata is honored and increases the blast radius because the skill can read/write local files. Confirm which setting the platform will enforce and whether always:true is intentional.
What to consider before installing
This plugin appears to do what it says: local .xlsx inspection and row editing. Before installing, confirm the following: (1) The SKILL.md (skills/excel/SKILL.md) includes metadata setting always:true — decide whether you want the plugin force-enabled for every agent run; if not, remove or change that metadata. (2) The plugin reads and writes any .xlsx path you provide (it resolves ~ and absolute/relative paths), so avoid giving it sensitive workbooks or system-wide paths. (3) The package uses standard npm dependencies — if you require extra assurance, review the package-lock.json and the dist/src code locally and run tests in a sandboxed account before enabling in production. (4) If you do enable it, consider setting a restrictive defaultDirectory and running the plugin under a least-privilege account or container to limit filesystem exposure.Verification
{
"hasProvenance": false,
"scanStatus": "pending",
"scope": "artifact-only",
"sourceCommit": "e480449",
"sourceRepo": "clawic/plugins",
"sourceTag": "main",
"summary": "Validated package structure and linked the release to source metadata.",
"tier": "source-linked"
}Tags
{
"latest": "0.1.0"
}Excel Plugin
Native OpenClaw plugin that adds local .xlsx workbook tools with:
- workbook sheet inspection and basic sheet metadata
- row-based reads from a selected sheet with pagination
- sheet replacement from structured JSON rows
- row appends that preserve existing workbook sheets
Install
npm install
npm run build
openclaw plugins install .
openclaw plugins enable excel
openclaw gateway restart
Config
{
plugins: {
entries: {
excel: {
enabled: true,
config: {
defaultDirectory: "~/Documents",
maxRows: 500,
},
},
},
},
}
defaultDirectory is optional and only affects relative paths. maxRows defaults to 500.
Tools
excel_list_sheetsexcel_read_sheetexcel_replace_sheetexcel_append_rows
Usage
After enabling excel, ask for things like:
- List the sheets in
~/Documents/report.xlsx. - Read the first 50 rows from the
Pipelinesheet. - Replace the
Summarysheet inreport.xlsxwith these rows. - Append these new leads to the
Leadssheet.
The plugin works on local .xlsx files and returns structured row data in the tool details.
