exstruct-cli

A command-line tool for safely creating, inspecting, validating, and editing Excel workbooks. Excel workbooks are spreadsheet files that may contain multiple sheets and structured data.

In plain words
What is it for?
Use it to make new workbooks, patch existing ones, check whether files can be read, inspect available operations, and test risky changes before applying them.
Why use it?
It helps avoid unsupported edits, unclear create-versus-edit choices, and risky changes to unfamiliar spreadsheet files.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/harumiweb/exstruct/exstruct-cli
Any agent
npx skills add harumiWeb/exstruct --skill exstruct-cli
Clone the repo
git clone --depth 1 https://github.com/harumiWeb/exstruct

Made for: Claude Code, Codex.

Per session 76 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 466 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00076 $0.00466
Opus 5 $0.00038 $0.00233
Sonnet 5 $0.00015 $0.00093
Haiku 4.5 $0.00008 $0.00047

Measured 2d ago against content hash e3648e20a128, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

exstruct-cli scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.agents/skills/exstruct-cli/SKILL.md · 49 lines

What it actually says

ExStruct CLI

Use the existing editing CLI as the default local operational interface for ExStruct workbook create/edit requests.

Select a command

  • Use exstruct make when the user wants a new workbook created and populated.
  • Use exstruct patch when the user wants an existing workbook edited.
  • Use exstruct validate when workbook readability is uncertain or before a risky edit on an unfamiliar file.
  • Use exstruct ops list when the required operation is still unclear.
  • Use exstruct ops describe <op> when you know the likely op name but need the exact schema or constraints.
  • Hand the workflow off to MCP when the user needs host-owned path policy, transport mapping, artifact mirroring, or other server-managed behavior.

Safety rules

  • Do not invent unsupported patch ops.
  • Do not apply destructive edits immediately when the request is ambiguous.
  • Prefer --dry-run before risky edits.
  • Pin --backend openpyxl when the dry run and the real apply must use the same engine.
  • Explain backend-specific failures directly instead of hiding them behind a generic retry.

Workflow

  1. Decide whether the request is create, edit, or actually an MCP-hosted task.
  2. Identify the needed op or inspect the public op schema.
  3. Validate the workbook when the file, backend, or request is uncertain.
  4. Run --dry-run for risky edits and inspect PatchResult.
  5. Apply the real edit only after the planned change is acceptable.
  6. Verify the result with the lightest step that still matches the user's risk.

References

  • references/command-selection.md
  • references/safe-editing.md
  • references/ops-guidance.md
  • references/verify-workflows.md
  • references/backend-constraints.md
Files

What ships with it

6 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 49 lines · 76 tokens per session scan A e3648e20a128

Subscribe to this mod's changes

exstruct-cli is a skill published in the GitHub repository harumiWeb/exstruct (195 stars, last pushed 2mo ago), licensed BSD-3-Clause. It adds 76 tokens to every session and 466 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

pdf-table-to-excel

TablePack: Convert PDF tables to multi-sheet Excel packages with MinerU — original table screenshots, figures, QC notes, no fabricated data. Path A: existing MinerU users. Path B: run scripts/installmineru. first. REQUIRES multimodal/vision model for QC (open 原始表格/.jpg). Triggers: 转表格, 转excel, 转Excel, PDF表格…

kujiangmudao/tablepack · 132 tokens

mqc-timeline-master

Turn raw case materials into a faithful, court-ready case timeline (SVG + PNG + PPTX + VSDX + drawio, plus a traceability index in Word). Use this whenever the user hands over litigation materials — a judgment, complaint, defence, evidence list, contract, bank or Alipay statement, WeChat screenshots, scanned exhibits…

zeweihan/aiworkdeck · 269 tokens

mqc-litigation-visual-redraw

Redraw a litigation diagram into a restrained, court-ready presentation graphic (SVG + PNG) WITHOUT changing any text or legal meaning. Use this whenever the user supplies a case timeline, a legal process flowchart, OR a party/relationship diagram and wants it cleaned up, beautified, redrawn, made professional…

zeweihan/aiworkdeck · 257 tokens

peek

Searches memories and displays compact one-liner results, or looks up a specific memory by ID. Use for quick memory lookups, checking if a decision was recorded, resolving [mem0:id] citations, or browsing memories without full category detail.

mem0ai/mem0 · 52 tokens

mem0-test-integration

Verify a Mem0 integration produced by /mem0-integrate. Runs in the same workspace on the same branch (loose coupling) — installs dependencies, runs the repo's native test suite, then exercises a real end-to-end smoke flow against the user's API key. Produces a scorecard. TRIGGER when: user has just run /mem0-integrate…

mem0ai/mem0 · 207 tokens

mem0-oss-to-platform

Plan and then execute a migration of a project from the mem0 open-source / self-hosted SDK (the local Memory class) to the mem0 Platform / hosted / managed SDK (the MemoryClient class). Use this whenever a developer wants to move, switch, or migrate their mem0 usage off OSS/self-hosted to the hosted API — e.g.…

mem0ai/mem0 · 273 tokens