The Agent Skills Directory

[COMMAND_EXECUTION]: The scripts/recalc.py script executes the libreoffice or soffice binary using subprocess.run. This is used to ensure formulas are recalculated in the generated workbook before delivery. The implementation passes arguments as a list rather than a single string, which prevents shell command injection.
[EXTERNAL_DOWNLOADS]: The skill instructions specify the installation of openpyxl via pip. This is a standard library for Excel file manipulation. The skill also relies on a local installation of LibreOffice for its recalculation feature.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest financial data and assumptions to build workbooks, creating a surface where untrusted input could potentially influence the resulting spreadsheet.
Ingestion points: User-provided financial figures, growth rates, and source documentation names in SKILL.md.
Boundary markers: None explicitly defined for isolating user-provided data from formula logic.
Capability inventory: The skill has file-write capabilities via openpyxl and shell command execution via the recalc.py script.
Sanitization: No specific sanitization or validation logic is provided for user-supplied strings before they are incorporated into cell values or comments.

excel-author