The Agent Skills Directory

[COMMAND_EXECUTION]: The recalc.py utility invokes the soffice binary and system timeout commands using subprocess.run to perform headless formula evaluation. These calls use argument arrays to mitigate shell injection risks.
[PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it processes external spreadsheet files.
Ingestion points: Data enters the agent context via pd.read_excel() and openpyxl.load_workbook() calls documented in SKILL.md and used in recalc.py.
Boundary markers: No explicit delimiters or instructions to ignore embedded cell commands are provided for data ingestion.
Capability inventory: The skill can execute system commands via recalc.py and perform file-write operations using pandas and openpyxl.
Sanitization: No input validation or sanitization is performed on spreadsheet cell content before processing.
[SAFE]: The recalc.py script manages application configuration by writing a hardcoded StarBasic macro to the LibreOffice user profile directory. This is a legitimate functional requirement for automated recalculation and does not involve untrusted data.

xlsx