Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/sayed3li97/skillscore/spreadsheet-skillnpx skills add sayed3li97/skillscore --skill spreadsheet-skillgit clone --depth 1 https://github.com/sayed3li97/skillscoreWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00025 | $0.00182 |
| Opus 5 | $0.00013 | $0.00091 |
| Sonnet 5 | $0.00005 | $0.00036 |
| Haiku 4.5 | $0.00003 | $0.00018 |
Grade A, and why
csv-to-xlsx scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
CSV to XLSX converter
CSV is a widely used data format. This skill turns CSV input into styled XLSX workbooks.
Workflow
- Read the CSV input and detect the delimiter.
- Create a workbook and write the header row in bold.
- Freeze the top pane and auto-size the columns.
- Save the workbook next to the source file.
For the delimiter you can use a comma, or a semicolon, or a tab, or any single character the source uses.
name,amount,date
Widgets,120,2031-01-15
The output keeps one sheet per input file and uses the file name as the sheet name.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 30 lines · 25 tokens per session scan A 73501fe90f53
csv-to-xlsx is a skill published in the GitHub repository sayed3li97/skillscore (4 stars, last pushed 1mo ago), licensed Apache-2.0. It adds 25 tokens to every session and 182 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
data-analysis
Use this skill when the user uploads Excel (.xlsx/.xls) or CSV files and wants to perform data analysis, generate statistics, create summaries, pivot tables, SQL queries, or any form of structured data exploration. Supports multi-sheet Excel workbooks, aggregation, filtering, joins, and exporting results to…
enrich-excel
Enrich a live Excel spreadsheet by researching missing data with TinyFish and writing results directly into the running Excel app via AppleScript. Use when a user says "fill in my spreadsheet", "enrich this Excel file", "research and fill missing data", "update my Excel sheet", "look up data for each row", or any…
xlsx
只要电子表格文件（.xlsx、.xlsm、旧版 .xls、.csv、.tsv）是任务的主要输入或输出，或者需要 被打开、读取、创建、修改，就使用本 Skill。也适用于公式、格式、图表、数据清洗和表格格式转换。 不用于既不读取也不产出表格文件的一般数据分析、数据库流程、独立脚本或普通文档制作。.
backend-engineer
Supabase integration specialist. Handles database schema, authentication, Row Level Security (RLS), real-time subscriptions, and storage. Connects existing UI to real backend. Only called AFTER UI exists with mock data. Triggers: connect database, connect Supabase, add auth, make login, backend integration, real data…
dev-engineer
Adds logic, state management, TypeScript types, and CRUD operations to UI. Works AFTER ui-first-builder creates the interface. Implements Zustand stores, form handling with React Hook Form + Zod, and prepares for backend connection. Triggers: add logic, add functionality, make it work, state management, form…
orchestration-protocol
The single source of truth for how TFW commands survey their runtime, choose an execution mode (teams / subagents / sequential), route models, and run the TOH LOOP — the autonomous plan-execute-verify protocol driven by .toh/plan.md + .toh/progress.md. Loaded by /toh, /toh-vibe, /toh-plan. Triggers: build a whole…