feat: add built-in skill creator and document skills

[Soulter]

Summary

• bundle read-only skill-creator, documents, pdf, and spreadsheets Skills in the built-in AstrBot plugin
• discover built-in plugin Skills alongside local, plugin-provided, workspace, and sandbox Skills while preserving local override priority
• allow restricted local agents to read built-in Skill assets while keeping global and plugin-provided Skills read-only
• add the document, PDF, and spreadsheet runtime dependencies and align closed capability status labels

Why

The Skills were prepared on this branch but were not merged before v4.27.0 was released. As a result, source and Docker installs did not contain the four Skills even though the release notes listed them. This PR adds the actual bundled assets and discovery behavior so they are available without seeding the persistent data/skills volume.

User impact

Docker and source installs will discover the four bundled Skills automatically as preset, read-only capabilities. Users can still provide a local Skill with the same name to override a preset.

Validation

• uv run ruff format . — 499 files left unchanged
• uv run ruff check . — passed
• targeted Skill, filesystem, sync, cache, and metadata tests — 74 passed
• git diff --check — passed

Summary by Sourcery

Bundle and expose new built-in skills for AstrBot, including PDF, document, spreadsheet, and skill-creator capabilities, update discovery and permission handling so they appear as preset read-only skills, and add supporting runtime dependencies and UI indicators.

New Features:

• Provide built-in PDF, document, spreadsheet, and skill-creator skills packaged within AstrBot’s internal plugin.
• Introduce Markdown-to-PDF, CSV-to-XLSX, DOCX inspection/validation/rendering, and spreadsheet inspection/validation/rendering scripts as part of the office-related skills.
• Add a skill-creator utility for initializing and validating AstrBot Skills via bundled scripts.

Bug Fixes:

• Ensure built-in skills are discovered and surfaced as preset capabilities without relying on seeding the persistent skills data directory.
• Allow restricted local members to read built-in plugin skill assets while preventing writes to globally installed skills.

Enhancements:

• Extend skill discovery to include reserved built-in plugins and mark their skills as preset, read-only entries in the skill inventory.
• Refine filesystem access controls so non-admin users can only modify workspace and temporary files while plugin and global skills remain read-only.
• Update the dashboard skill UI to label preset and sandbox-only skills consistently.
• Improve sandbox skill cache and sync behavior to keep builtin skills available even when local skills are empty.

Build:

• Add document and spreadsheet-related Python dependencies (pandas, openpyxl, python-docx, reportlab, xlrd) to pyproject and requirements to support the new office skills.

Tests:

• Add integration tests covering built-in PDF, document, spreadsheet, and skill-creator scripts and documentation guidance.
• Extend filesystem, skill metadata, sync, and sandbox cache tests to cover builtin plugin roots, preset flags, and updated permission behavior.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	astrbot-docs	a1597ff	Commit Preview URL Branch Preview URL	Aug 02 2026, 03:32 PM

[sourcery-ai]

Sorry @Soulter, your pull request is larger than the review limit of 150000 diff characters

[dosubot]

📄 Knowledge review

Dosu skipped reviewing this PR because your organization has used its 200 included credits for the month. Your usage will reset on 2026-09-01. To have Dosu review this PR before then, ask your organization admin to upgrade to a pro account.

---