The Agent Skills Directory

[COMMAND_EXECUTION]: The skill makes extensive use of system commands and subprocesses via subprocess.check_call and spawnSync to manage its build pipeline and environment configuration.
[EXTERNAL_DOWNLOADS]: The skill fetches font resources from Google Fonts at render time and installs multiple third-party libraries, including reportlab, pypdf, matplotlib, and playwright, from external package registries.
[REMOTE_CODE_EXECUTION]: Several scripts, including fill_inspect.py, fill_write.py, merge.py, and render_body.py, include ensure_deps() functions that automatically invoke pip install to add missing dependencies at runtime. The render_cover.js script similarly attempts to install the Playwright browser engine if not present. These automated installations can modify the host system and introduce unverified code from remote registries.
[REMOTE_CODE_EXECUTION]: The scripts/cover.py script contains a critical lack of output sanitization. User-supplied metadata such as the document title, author name, and subtitle are directly interpolated into HTML templates. When scripts/render_cover.js renders the resulting file using Playwright, a malicious user could provide input designed to perform HTML injection or XSS. This vulnerability allows for unauthorized resource loading and potential local file disclosure via the browser engine's access to the filesystem.

minimax-pdf