CtrlK
BlogDocsLog inGet started
Tessl Logo

xlsx

Use this skill any time a spreadsheet file is the primary input or output. This means any task where the user wants to: open, read, edit, or fix an existing .xlsx, .xlsm, .csv, or .tsv file (e.g., adding columns, computing formulas, formatting, charting, cleaning messy data); create a new spreadsheet from scratch or from other data sources; or convert between tabular file formats. Trigger especially when the user references a spreadsheet file by name or path — even casually (like "the xlsx in my downloads") — and wants something done to it or produced from it. Also trigger for cleaning or restructuring messy tabular data files (malformed rows, misplaced headers, junk data) into proper spreadsheets. The deliverable must be a spreadsheet file. Do NOT trigger when the primary deliverable is a Word document, HTML report, standalone Python script, database pipeline, or Google Sheets API integration, even if tabular data is involved.

90

1.54x
Quality

88%

Does it follow best practices?

Impact

91%

1.54x

Average score across 8 eval scenarios

SecuritybySnyk

Low

Low-risk findings worth noting

The canonical home for this skill is xlsx in anthropics/skills

SKILL.md
Quality
Evals
Security

Low

Low-risk findings.

1 low severity finding. Worth noting, but not necessarily harmful.

Low

W011: Third-party content exposure detected (indirect prompt injection risk).

What this means

The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.

Why it was flagged

The required runtime workflow in SKILL.md and scripts/recalc.py operates on user-provided Excel/DOCX/PPTX files by reading their internal cell/XML text (e.g., formulas and tracked-change text) rather than fetching first-party documentation, so outsider-authored free text can be ingested by uploading a poisoned document/workbook.

Report incorrect finding
Repository
tsinghua-fib-lab/AgentSociety
Audited
Security analysis
Snyk

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.