The Agent Skills Directory

[COMMAND_EXECUTION]: The scripts/render_svg.py script uses subprocess.run to call the rsvg-convert system utility for SVG-to-PNG rendering. The command is constructed using a list of arguments, which is a secure practice that prevents shell injection by avoiding the use of a shell for execution.
[DYNAMIC_EXECUTION]: The rendering pipeline in scripts/render_svg.py includes a fallback mechanism using the Playwright library to launch a headless browser. This is used for rendering locally generated temporary HTML files for the purpose of visual verification of the SVG output.
[SAFE]: The skill provides a robust security validator in scripts/validate_svg.py that checks for and rejects potentially dangerous SVG features. It specifically identifies and blocks elements like <script>, <foreignObject>, and attributes containing javascript: or event handlers (e.g., onload, onclick).
[SAFE]: All external dependencies listed in requirements.txt (lxml, cairosvg, Pillow, playwright) are standard, reputable packages within the Python ecosystem for image processing and automation, aligned with the skill's functional purpose.

nextreme-svg