The Agent Skills Directory

[PROMPT_INJECTION]: The skill processes untrusted content from various document formats (Word, Excel, Markdown) which could contain malicious instructions designed to hijack the agent's behavior during the conversion process.
Ingestion points: The skill reads content from .docx, .xlsx, .csv, and .md files using Python libraries like python-docx and openpyxl as described in SKILL.md.
Boundary markers: None identified. The instructions do not specify any delimiters or warnings to the agent to treat the content of the files as data rather than instructions.
Capability inventory: The skill uses Bash, Write, and Edit tools, and the Python code interacts with the filesystem, which could be exploited if an injection attack is successful.
Sanitization: No sanitization, filtering, or validation of the text extracted from documents is implemented.

wps-batch-convert