local-workbook-mcp

The project is explicitly designed with 'Privacy-First Local Operation' as a core principle, ensuring Excel data never leaves the local machine. It leverages Semantic Kernel's plugin architecture, where predefined tools wrap MCP server functions, limiting arbitrary code execution by the LLM. Error messages are sanitized (e.g., 'Sheet not found' instead of revealing full path/name) to prevent sensitive data exposure, with full details logged locally for troubleshooting. Input validation is present (e.g., JSON schema for pivot analysis). There are no apparent hardcoded critical secrets in the provided code snippets (API keys are noted as 'not-used' or 'not-needed-for-local' for local LLMs). The main risks would be potential vulnerabilities in underlying libraries like ClosedXML or the local LLM itself, or subtle command injection vectors if user inputs are mishandled before reaching the MCP server, though the design aims to mitigate these through controlled tool calls and sanitization.