<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>io.github.theluckystrike/excel-spreadsheet-xlsx-csv · mcp-spreadsheet · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/theluckystrike-excel-spreadsheet-xlsx-csv/mcp-spreadsheet.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] mcp-spreadsheet: Tool “sheet_query” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/theluckystrike-excel-spreadsheet-xlsx-csv/mcp-spreadsheet#chg-chg_01a0af06-bffa-7c50-9aa1-75a6d23362d4</link><guid isPermaLink="true">https://verifymcp.io/servers/theluckystrike-excel-spreadsheet-xlsx-csv/mcp-spreadsheet#chg-chg_01a0af06-bffa-7c50-9aa1-75a6d23362d4</guid><description>Tool “sheet_query” rewrote its description, which is the text the model reads. Compared against 2026-09-17.</description><pubDate>Thu, 17 Sep 2026 11:00:49 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] mcp-spreadsheet: Tool “license_activate” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/theluckystrike-excel-spreadsheet-xlsx-csv/mcp-spreadsheet#chg-chg_01a08dff-411f-7805-9885-cba83f03c004</link><guid isPermaLink="true">https://verifymcp.io/servers/theluckystrike-excel-spreadsheet-xlsx-csv/mcp-spreadsheet#chg-chg_01a08dff-411f-7805-9885-cba83f03c004</guid><description>Tool “license_activate” rewrote its description, which is the text the model reads. Compared against 2026-09-10.</description><pubDate>Fri, 11 Sep 2026 01:05:10 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] mcp-spreadsheet: Tool “license_activate” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/theluckystrike-excel-spreadsheet-xlsx-csv/mcp-spreadsheet#chg-chg_01a088d8-c14f-700d-944c-8b65dd162805</link><guid isPermaLink="true">https://verifymcp.io/servers/theluckystrike-excel-spreadsheet-xlsx-csv/mcp-spreadsheet#chg-chg_01a088d8-c14f-700d-944c-8b65dd162805</guid><description>Tool “license_activate” rewrote its description, which is the text the model reads. Compared against 2026-09-09.</description><pubDate>Thu, 10 Sep 2026 01:05:01 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] mcp-spreadsheet: Tool “license_status” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/theluckystrike-excel-spreadsheet-xlsx-csv/mcp-spreadsheet#chg-chg_01a088d8-c150-73a7-893a-0d23af4f9ba5</link><guid isPermaLink="true">https://verifymcp.io/servers/theluckystrike-excel-spreadsheet-xlsx-csv/mcp-spreadsheet#chg-chg_01a088d8-c150-73a7-893a-0d23af4f9ba5</guid><description>Tool “license_status” rewrote its description, which is the text the model reads. Compared against 2026-09-09.</description><pubDate>Thu, 10 Sep 2026 01:05:01 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] mcp-spreadsheet: Tool “sheet_write” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/theluckystrike-excel-spreadsheet-xlsx-csv/mcp-spreadsheet#chg-chg_01a088d8-c150-7e09-9017-a799e01cf02e</link><guid isPermaLink="true">https://verifymcp.io/servers/theluckystrike-excel-spreadsheet-xlsx-csv/mcp-spreadsheet#chg-chg_01a088d8-c150-7e09-9017-a799e01cf02e</guid><description>Tool “sheet_write” rewrote its description, which is the text the model reads. Compared against 2026-09-09.</description><pubDate>Thu, 10 Sep 2026 01:05:01 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] mcp-spreadsheet: Tool “sheet_query” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/theluckystrike-excel-spreadsheet-xlsx-csv/mcp-spreadsheet#chg-chg_01a088d8-c150-7975-a60d-3f885eae809b</link><guid isPermaLink="true">https://verifymcp.io/servers/theluckystrike-excel-spreadsheet-xlsx-csv/mcp-spreadsheet#chg-chg_01a088d8-c150-7975-a60d-3f885eae809b</guid><description>Tool “sheet_query” rewrote its description, which is the text the model reads. Compared against 2026-09-09.</description><pubDate>Thu, 10 Sep 2026 01:05:01 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] mcp-spreadsheet: First check of Judged manipulation (pass)</title><link>https://verifymcp.io/servers/theluckystrike-excel-spreadsheet-xlsx-csv/mcp-spreadsheet#chg-chg_01a083b2-28d0-71f9-a8d4-91779f6921e9</link><guid isPermaLink="true">https://verifymcp.io/servers/theluckystrike-excel-spreadsheet-xlsx-csv/mcp-spreadsheet#chg-chg_01a083b2-28d0-71f9-a8d4-91779f6921e9</guid><description>First check of Judged manipulation (pass). Compared against 2026-09-08.</description><pubDate>Wed, 09 Sep 2026 01:04:46 GMT</pubDate><category>security</category><category>neutral</category><category>check.appeared</category></item><item><title>[SECURITY] mcp-spreadsheet: Authorization (Authorisation is enforced on tool calls, but the challenge carries no valid RFC 9728 metadata, so a client cannot discover where to get a token.)</title><link>https://verifymcp.io/servers/theluckystrike-excel-spreadsheet-xlsx-csv/mcp-spreadsheet#chg-chg_01a083b2-28cf-7cc5-b9a5-8e0a6b276a71</link><guid isPermaLink="true">https://verifymcp.io/servers/theluckystrike-excel-spreadsheet-xlsx-csv/mcp-spreadsheet#chg-chg_01a083b2-28cf-7cc5-b9a5-8e0a6b276a71</guid><description>Authorization (Authorisation is enforced on tool calls, but the challenge carries no valid RFC 9728 metadata, so a client cannot discover where to get a token.). Compared against 2026-09-08.</description><pubDate>Wed, 09 Sep 2026 01:04:46 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] mcp-spreadsheet: Injection markers (unverified → pass)</title><link>https://verifymcp.io/servers/theluckystrike-excel-spreadsheet-xlsx-csv/mcp-spreadsheet#chg-chg_01a083b2-28cf-7209-a4fa-145910d388f4</link><guid isPermaLink="true">https://verifymcp.io/servers/theluckystrike-excel-spreadsheet-xlsx-csv/mcp-spreadsheet#chg-chg_01a083b2-28cf-7209-a4fa-145910d388f4</guid><description>Injection markers (unverified → pass). Compared against 2026-09-08.</description><pubDate>Wed, 09 Sep 2026 01:04:46 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] mcp-spreadsheet: Transport (unverified → pass)</title><link>https://verifymcp.io/servers/theluckystrike-excel-spreadsheet-xlsx-csv/mcp-spreadsheet#chg-chg_01a083b2-28cd-7e56-a52f-b2af7f434043</link><guid isPermaLink="true">https://verifymcp.io/servers/theluckystrike-excel-spreadsheet-xlsx-csv/mcp-spreadsheet#chg-chg_01a083b2-28cd-7e56-a52f-b2af7f434043</guid><description>Transport (unverified → pass). Compared against 2026-09-08.</description><pubDate>Wed, 09 Sep 2026 01:04:46 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item></channel></rss>