The Agent Skills Directory

[SAFE]: The skill implements legitimate Excel processing logic for construction use cases using standard libraries such as pandas and openpyxl.
[SAFE]: The identified dependencies (pandas, openpyxl, xlrd) are well-known, reputable packages for data analysis and spreadsheet handling.
[SAFE]: The referenced ddc_toolkit and its components (RevitExporter, CWICRSemanticSearch) are consistent with the skill's author (datadrivenconstruction) and intended purpose.
[INDIRECT_PROMPT_INJECTION]: The skill processes external spreadsheet data, which is an inherent attack surface for this type of tool.
Ingestion points: process_qto_from_bim in SKILL.md processes Excel files provided by the user or external BIM exports.
Boundary markers: The instructions.md file mandates that the agent must "Validate inputs before processing," which serves as a procedural safeguard.
Capability inventory: The skill leverages pandas for reading and openpyxl for generating formatted Excel files, with filesystem permissions requested in claw.json for I/O operations.
Sanitization: The provided code examples use standard library aggregation and formatting functions; explicit sanitization of cell contents against prompt injection is not depicted, which is typical for spreadsheet processing logic.

xlsx-construction