The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/pdf_organizer.py calls the external ocrmypdf utility for deskewing. The execution is handled securely by passing arguments as a list to subprocess.run, which prevents shell injection vulnerabilities.- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data extracted from PDF files. Evidence chain: 1. Ingestion points: Text is extracted using pypdf in scripts/pdf_organizer.py. 2. Boundary markers: The AI is instructed to use structured manifest fields and document evidence as described in SKILL.md. 3. Capability inventory: The skill performs PDF manipulation and local file writes in scripts/pdf_organizer.py. 4. Sanitization: The sanitize_filename function in scripts/pdf_organizer.py removes invalid characters from document titles. The risk is minimized by the skill's specific domain logic.- [EXTERNAL_DOWNLOADS]: The skill utilizes the pypdf Python package and refers to the well-known ocrmypdf system utility. These are standard tools for document processing and are considered safe.

pdf-organizer