DeepSeek++ is a browser extension that turns the DeepSeek website into an AI workspace with tools, memory, skills, media analysis, and automation. DeepSeek users employ it to manage projects, control browser pages, search the web, reuse context, and export conversations, while the catalogue entries add skills and instructions for that workspace.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add zhu1090093659/deepseek-pp --skill officecli-xlsxgit clone --depth 1 https://github.com/zhu1090093659/deepseek-ppWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/zhu1090093659/deepseek-pp/officecli-xlsx)<a href="https://agentmods.dev/skills/zhu1090093659/deepseek-pp/officecli-xlsx"><img src="https://agentmods.dev/badge/skills/zhu1090093659/deepseek-pp/officecli-xlsx/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/zhu1090093659/deepseek-pp/officecli-xlsx"><img src="https://agentmods.dev/badge/skills/zhu1090093659/deepseek-pp/officecli-xlsx.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Supply Chain · line 12 Remote code is downloaded and executed. This bypasses code review and could introduce malicious code.Fix: Avoid downloading and executing remote scripts. Use trusted packages from PyPI/npm. If remote fetch is required, verify checksums and use HTTPS.
- high Tool Misuse · line 451 Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).Fix: Validate all tool parameters against an allowlist. Reject dangerous parameter values (shell=True, --force, -rf /) and use safe defaults.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00119 | $0.09058 |
| Opus 5 | $0.00060 | $0.04529 |
| Sonnet 5 | $0.00024 | $0.01812 |
| Haiku 4.5 | $0.00012 | $0.00906 |
Grade C, and why
officecli-xlsx scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
- **macOS / Linux**: `curl -fsSL https://d.officecli.ai/install.sh | bash` Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
- **macOS / Linux**: `curl -fsSL https://d.officecli.ai/install.sh | bash` Copies of this mod
1 near-identical copy found in the catalogue:
- officecli-xlsx — 98% identical, 5 lines differ
How it starts
The opening of the file, as written. The whole thing — 487 lines — stays where its author put it; the contents beside it link to each section on GitHub.
OfficeCLI XLSX Skill
Setup
If officecli is missing:
- macOS / Linux:
curl -fsSL https://d.officecli.ai/install.sh | bash - Windows (PowerShell):
irm https://d.officecli.ai/install.ps1 | iex
Verify with officecli --version (open a new terminal if PATH hasn't picked up). If install fails, download a binary from https://github.com/iOfficeAI/OfficeCLI/releases.
⚠️ Help-First Rule
This skill teaches what good xlsx looks like, not every command flag. When a property name, enum value, or alias is uncertain, consult help BEFORE guessing.
officecli help xlsx # List all xlsx elements
officecli help xlsx <element> # Full element schema (e.g. pivottable, chart, cf)
officecli help xlsx <verb> <element> # Verb-scoped (e.g. add chart, set cell)
officecli help xlsx <element> --json # Machine-readable schema
Help reflects the installed CLI version. When this skill and help disagree, help is authoritative.
Shell & Execution Discipline
Shell quoting (zsh / bash). Excel paths contain [], and number formats contain $. Both are shell metacharacters. Rules:
- ALWAYS quote element paths:
"/Sheet1/row[1]", not/Sheet1/row[1]. - Use single quotes for any prop value containing
$:numFmt='$#,##0'. - For formulas with cross-sheet
!references, usebatchwith a<<'EOF'heredoc (see Known Issues). - NEVER hand-write
\$,\t,\ninside executable examples. The CLI does not interpret backslash escapes; they will land in your file as literal characters.
Incremental execution. Run commands one at a time and read each exit code. officecli mutates the file on every call; a 50-command script that fails at command 3 will cascade silently. One command → check output → continue.
Requirements for Outputs
Before reaching for a command, know what a good xlsx looks like. These are the deliverable standards every workbook MUST meet.
All Excel files
Zero formula errors. Every delivered workbook MUST have ZERO #REF!, #DIV/0!, #VALUE!, #NAME?, #N/A. No exceptions — guard denominators with IFERROR or IF(x=0,...).
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 487 lines · 119 tokens per session scan C 5d82da7747ec
officecli-xlsx is a skill published in the GitHub repository zhu1090093659/deepseek-pp (1,830 stars, last pushed 28d ago), licensed Apache-2.0. It adds 119 tokens to every session and 9,058 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it C with 2 findings (downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
excel-helper
A spreadsheet assistant for Excel, a program used to organize, calculate, and analyze tabular data. It covers formulas, pivot tables, charts, data cleaning, and VBA macros, which are small automation programs for Excel.
cash-flow-snapshot
Create a 30/60/90-day cash-flow forecast from AR, AP, opening cash, payment timing, and fixed-cost data. Use when asked about runway, payroll coverage, liquidity risks, or a near-term cash crunch.
office-docs
A workflow for reading and creating Microsoft Word documents and Excel spreadsheets by converting them to and from plain text, Markdown, or CSV files.
officecli
Create, analyze, proofread, and modify Office documents (.docx, .xlsx, .pptx) using the officecli CLI tool. Use when the user wants to create, inspect, check formatting, find issues, add charts, or modify Office documents.
csv_analyzer
Analyze CSV and Excel files — statistics, filtering, grouping, and data previews. Use when: user asks to read, analyze, query, summarize, or explore tabular data in CSV, TSV, or Excel files. NOT for: database queries, writing new files, or non-tabular formats.
xlsx
Create and edit Excel .xlsx workbooks (sheets, cells, formulas, formatting) via Python openpyxl. Use to generate spreadsheets or write/update cells. Reading is via os.fs.readdocument.