The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs users to install the necessary components using npx or by downloading releases from the developer's GitHub repository. These are standard software distribution methods and the resources are hosted on the developer's own infrastructure.
[INDIRECT_PROMPT_INJECTION]: The skill handles complex data structures from Excel workbooks. It mitigates potential injection risks by providing tools for pre-execution validation and 'preflight' checks on data structures before they are committed to the workbook.
[PROMPT_INJECTION]: Instructions regarding the visibility of the Excel window (hidden vs. shown) were evaluated for potential concealment risks. The analysis confirms these are standard automation practices for improving performance and user experience, not attempts to hide malicious activities from the user.
[DATA_EXFILTRATION]: The skill documentation notes that M code formatting can be performed by an external service (powerqueryformatter.com) but explicitly requires the agent to obtain user consent before doing so, ensuring transparency and data control.

excel-mcp