Code PluginExecutes codesource-linked

Excel

Native OpenClaw Excel plugin for local XLSX inspection and row editing

Community code plugin. Review compatibility and verification before install.
excel · runtime id excel
Install
openclaw plugins install clawhub:excel
Latest Release
Version 0.1.0
Compatibility
{
  "builtWithOpenClawVersion": "2026.3.23-2",
  "pluginApiRange": ">=2026.3.23"
}
Capabilities
{
  "bundledSkills": [],
  "capabilityTags": [
    "executes-code"
  ],
  "channels": [],
  "commandNames": [],
  "configSchema": true,
  "configUiHints": false,
  "executesCode": true,
  "hooks": [],
  "httpRouteCount": 0,
  "materializesDependencies": false,
  "providers": [],
  "runtimeId": "excel",
  "serviceNames": [],
  "setupEntry": false,
  "toolNames": []
}
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name, description, README, openclaw manifest, and code all match: the package reads and writes local .xlsx files, lists sheets, pages rows, replaces or appends sheets. Required capabilities (filesystem access) are proportionate to the stated purpose.
Instruction Scope
SKILL.md and skills/excel/SKILL.md instruct only to install/build the plugin and to use the excel_* tools against local .xlsx files. The runtime instructions and code operate only on local filesystem paths and do not reference external endpoints, unrelated files, or broad system data collection.
Install Mechanism
No install spec pulling remote archives is present; code is bundled in the package and dependencies are standard npm packages (openclaw, xlsx, typebox). There are no URL downloads or extract steps from arbitrary hosts in the manifest.
Credentials
The skill requires no environment variables or credentials. The code only reads process.env.HOME to expand ~ in paths — this is reasonable for resolving user paths and is documented via the defaultDirectory config.
!
Persistence & Privilege
skills/excel/SKILL.md contains YAML metadata with {"openclaw":{"always":true}} which would force the skill to be included in every agent run; registry metadata for the skill lists always: false. This discrepancy gives the plugin elevated persistence if the SKILL.md metadata is honored and increases the blast radius because the skill can read/write local files. Confirm which setting the platform will enforce and whether always:true is intentional.
What to consider before installing
This plugin appears to do what it says: local .xlsx inspection and row editing. Before installing, confirm the following: (1) The SKILL.md (skills/excel/SKILL.md) includes metadata setting always:true — decide whether you want the plugin force-enabled for every agent run; if not, remove or change that metadata. (2) The plugin reads and writes any .xlsx path you provide (it resolves ~ and absolute/relative paths), so avoid giving it sensitive workbooks or system-wide paths. (3) The package uses standard npm dependencies — if you require extra assurance, review the package-lock.json and the dist/src code locally and run tests in a sandboxed account before enabling in production. (4) If you do enable it, consider setting a restrictive defaultDirectory and running the plugin under a least-privilege account or container to limit filesystem exposure.
Verification
{
  "hasProvenance": false,
  "scanStatus": "pending",
  "scope": "artifact-only",
  "sourceCommit": "e480449",
  "sourceRepo": "clawic/plugins",
  "sourceTag": "main",
  "summary": "Validated package structure and linked the release to source metadata.",
  "tier": "source-linked"
}
Tags
{
  "latest": "0.1.0"
}

Excel Plugin

Native OpenClaw plugin that adds local .xlsx workbook tools with:

  • workbook sheet inspection and basic sheet metadata
  • row-based reads from a selected sheet with pagination
  • sheet replacement from structured JSON rows
  • row appends that preserve existing workbook sheets

Install

npm install
npm run build
openclaw plugins install .
openclaw plugins enable excel
openclaw gateway restart

Config

{
  plugins: {
    entries: {
      excel: {
        enabled: true,
        config: {
          defaultDirectory: "~/Documents",
          maxRows: 500,
        },
      },
    },
  },
}

defaultDirectory is optional and only affects relative paths. maxRows defaults to 500.

Tools

  • excel_list_sheets
  • excel_read_sheet
  • excel_replace_sheet
  • excel_append_rows

Usage

After enabling excel, ask for things like:

  • List the sheets in ~/Documents/report.xlsx.
  • Read the first 50 rows from the Pipeline sheet.
  • Replace the Summary sheet in report.xlsx with these rows.
  • Append these new leads to the Leads sheet.

The plugin works on local .xlsx files and returns structured row data in the tool details.