The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill's presentation viewer generator is susceptible to indirect injection through unsanitized data interpolation.
Ingestion points: The script scripts/generate_viewer.py reads data from a user-provided JSON file via the --input argument.
Boundary markers: Absent. There are no delimiters or instructions to prevent the interpreter or browser from executing code embedded within the input data.
Capability inventory: The skill generates and writes an HTML file (index.html) to the local file system and includes logic for image and video management.
Sanitization: Absent. The generate_viewer_html function in scripts/generate_viewer.py uses simple string replacement (.replace()) to insert slide titles and content items into the HTML template. Because no HTML escaping is performed, malicious scripts in the input JSON could execute arbitrary JavaScript in the context of the viewer.
[COMMAND_EXECUTION]: The documentation includes instructions for system-level modifications requiring elevated privileges.
Evidence: SKILL.md provides installation commands for the ffmpeg dependency using sudo apt-get install ffmpeg. While this is a standard setup procedure for a well-known tool, it involves administrative access.
[DYNAMIC_EXECUTION]: The skill dynamically generates functional code (HTML/JS) by interpolating user data into pre-defined templates.
Evidence: scripts/generate_viewer.py assembles an interactive web application at runtime. Additionally, a referenced script scripts/video_composer.py mentioned in the instructions for video synthesis was not included in the provided files, preventing a security audit of its execution logic.

nanobanana-ppt-visualizer