The Agent Skills Directory

[COMMAND_EXECUTION]: The skill frequently executes external command-line utilities via the subprocess.run module to perform its core tasks. This includes calling soffice (LibreOffice) for PDF rendering, pdftoppm (Poppler) for image conversion, and git for calculating document differences during validation. Notably, it also executes the gcc compiler at runtime to build a custom binary shim.
[REMOTE_CODE_EXECUTION]: The script scripts/office/soffice.py implements a process injection technique. It generates a C source file at runtime, compiles it into a shared object file (.so), and then utilizes the LD_PRELOAD environment variable to inject this library into the soffice process. This shim intercepts and modifies low-level system calls (socket, listen, accept, close). While documented as a sandbox compatibility fix, runtime generation and injection of executable code is a high-risk pattern.
[PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its ingestion of external, untrusted data from .pptx files.
Ingestion points: Data enters the environment via scripts/office/unpack.py, which extracts XML content from PowerPoint files.
Boundary markers: Extracted text is provided to the agent without the use of clear delimiters or instructions to ignore potential commands embedded within the slides.
Capability inventory: The skill has the ability to execute arbitrary shell commands and modify local files, creating a significant impact path if the agent is manipulated by malicious slide content.
Sanitization: Although defusedxml is used to mitigate XML-based vulnerabilities like XXE, there is no logic to sanitize or filter the natural language content before it is processed by the AI.
[EXTERNAL_DOWNLOADS]: The documentation references the installation of several third-party libraries from public registries (NPM and PyPI). These include markitdown (from Microsoft), pptxgenjs, Pillow, and various React-based icon libraries. These downloads are used for text extraction and deck generation workflows.

pptx