The Agent Skills Directory

[DYNAMIC_EXECUTION]: The script scripts/fill_fillable_fields.py implements a monkeypatch on the pypdf library at runtime. It replaces the DictionaryObject.get_inherited method with a custom implementation designed to work around a data structure error in the library's handling of selection list options in version 5.7.0.
[INDIRECT_PROMPT_INJECTION]: The skill's primary function is processing external PDF files, which represents an ingestion point for untrusted data that could contain malicious instructions.
Ingestion points: The skill utilizes pypdf, pdfplumber, and pdf2image to parse and extract data from PDF documents (seen in SKILL.md and various utility scripts).
Boundary markers: No explicit delimiters or instructions are provided to the agent to treat document content as untrusted or to ignore embedded instructions.
Capability inventory: The skill possesses the capability to write files and instructs the agent to execute shell commands and local Python scripts.
Sanitization: Extracted data is not explicitly sanitized before being used in the agent's workflow, potentially allowing malicious content within a PDF to influence agent behavior.
[COMMAND_EXECUTION]: The operational guides in forms.md and SKILL.md provide explicit instructions for the agent to execute local Python scripts and command-line utilities, including qpdf, pdftotext, and pdfimages, to perform document analysis and transformation tasks.

pdf