The Agent Skills Directory

[SAFE]: The skill implements security best practices for handling compressed archives. In scripts/ooxml_tool.py, the _is_unsafe_member function explicitly checks for and prevents ZipSlip (path traversal) vulnerabilities by validating file paths within the OOXML (ZIP) package before extraction.
[SAFE]: All external tools referenced, such as pandoc, libreoffice, and the Poppler suite (pdftoppm), are well-known, industry-standard utilities for document processing and conversion.
[SAFE]: The skill uses the established docx Node.js library for document creation and standard Python XML libraries for processing, avoiding custom or unverified implementations of complex file formats.
[SAFE]: No network operations, credential harvesting, or obfuscation techniques were detected in the provided scripts or instructions. The skill operates entirely on local files provided by the user.

docx