The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The scripts/pick_font.py script contains a function install_comic() that executes sudo apt-get install -y fonts-comic-neue. This command attempts to acquire administrative privileges to modify the system's installed packages.
[COMMAND_EXECUTION]: The scripts scripts/pick_font.py and scripts/compose_pptx.py utilize subprocess.check_output and subprocess.check_call to run system commands such as fc-list and fc-match. These are used to query and verify the availability of fonts on the host system.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user data which presents an attack surface for indirect prompt injection.
Ingestion points: User-provided PNG images (e.g., in SKILL.md and references/layers.md) and generated layout.json metadata.
Capability inventory: Subprocess calls for font management and package installation (pick_font.py, compose_pptx.py), and file system writes for image processing and PPTX generation.
Boundary markers: The instructions do not define delimiters or warnings to ignore embedded instructions in the processed assets.
Sanitization: No evidence of sanitization or filtering of text content extracted from the source images before it is interpolated into the layout or final document.
[EXTERNAL_DOWNLOADS]: The automatic installation of the fonts-comic-neue package via apt-get involves downloading software from external repositories. While targeting official system repositories, it remains an external dependency managed at runtime.

fig-pptx