The Agent Skills Directory

[COMMAND_EXECUTION]: The recalc.py script uses subprocess.run to call the soffice binary (LibreOffice) and the timeout or gtimeout utilities. These commands are used to automate spreadsheet formula evaluation.
[DYNAMIC_EXECUTION]: The script dynamically generates a StarBasic macro string and writes it to a file (Module1.xba) at runtime, which is then executed through the LibreOffice script engine to perform calculations.
[PERSISTENCE]: The skill modifies the host's persistent environment by installing a StarBasic macro into the local LibreOffice configuration directory (~/.config/libreoffice/ or ~/Library/Application Support/LibreOffice/). This modification remains after the skill's execution.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to read and process external data from spreadsheets using pandas and openpyxl. This creates an ingestion surface for untrusted data that could potentially contain malicious instructions, with no explicit sanitization logic described in the instructions.
[METADATA_POISONING]: There is a discrepancy in the skill's metadata; while the skill author is listed as frankxai, the LICENSE.txt file claims copyright for Anthropic, PBC, which could lead to confusion regarding the source and ownership of the code.

xlsx