The Agent Skills Directory

[COMMAND_EXECUTION]: The skill requests access to the Bash tool to execute Python scripts provided in the instructions. These scripts use the python-pptx library to analyze and modify PPTX files, which is consistent with the skill's primary purpose.
[DATA_EXPOSURE]: The skill operates on user-provided PPT files. While it reads document content to diagnose issues like text overflow or font inconsistency, there is no evidence of unauthorized access to sensitive file paths, environment variables, or credential stores.
[PROMPT_INJECTION]: As the skill processes external PPT documents, it possesses an indirect prompt injection surface. Malicious instructions embedded within a PPT slide could theoretically influence the agent's behavior if the agent reads the text content directly; however, the provided scripts are focused on structural and metadata analysis (fonts, colors, alignment) rather than interpreting slide text as logic.

wps-ppt-polish