The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill uses npm exec with the --package flag to download and execute the kordoc and pdfjs-dist packages from the public NPM registry at runtime.
[COMMAND_EXECUTION]: The skill executes a shell command that invokes npm exec followed by a Node.js script passed via a heredoc to perform the document comparison logic.
[DYNAMIC_EXECUTION]: The Node.js script dynamically resolves the installation path of the kordoc package by inspecting the PATH environment variable and uses a dynamic import() call to load the module from a computed file URL.
[DATA_EXPOSURE]: The skill uses fs.readFileSync to access and read the contents of local files (HWP, HWPX, PDF) provided by the user, which is necessary for the comparison functionality but represents a file system access surface.
[INDIRECT_PROMPT_INJECTION]: The skill ingests and processes the content of two documents, which could contain malicious instructions designed to influence the agent's summary of the comparison results. There are no explicit boundary markers or sanitization steps mentioned for the document content.

kordoc-compare-documents