The Agent Skills Directory

[COMMAND_EXECUTION]: The recalc.py utility invokes system binaries such as soffice, timeout, and gtimeout using subprocess.run to perform headless spreadsheet recalculation. The implementation uses list-based arguments to avoid shell injection vulnerabilities.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from spreadsheet files, creating an attack surface. 1. Ingestion points: The skill reads .xlsx, .xlsm, .csv, and .tsv files as described in SKILL.md and handled in recalc.py. 2. Boundary markers: Absent; no delimiters or 'ignore embedded instructions' warnings are identified for the spreadsheet data. 3. Capability inventory: Includes shell command execution via recalc.py and file system access across SKILL.md and recalc.py. 4. Sanitization: Absent; no explicit content validation or sanitization was detected for the processed spreadsheet content.
[PERSISTENCE]: To enable formula recalculation, the recalc.py script automatically installs a LibreOffice macro by writing a Module1.xba file to the user's application configuration directory (e.g., ~/.config/libreoffice/). This persistent modification of the application environment is required for the tool's core functionality.

xlsx