The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill uses npm exec to download and install the kordoc and pdfjs-dist packages from the public NPM registry during execution. While pdfjs-dist is provided by a well-known organization, kordoc is an external package without a pinned version.
[DYNAMIC_EXECUTION]: The command utilizes a shell heredoc to run Node.js code and performs a dynamic import() of the kordoc library. The file path for this import is dynamically constructed at runtime by resolving the binary location from the PATH environment variable.
[COMMAND_EXECUTION]: The skill executes shell commands via npm exec and Node.js code to perform file system operations, specifically opening and reading the header of local files.
[INDIRECT_PROMPT_INJECTION]: The skill ingests the first 4 bytes of a user-provided file to identify its magic bytes. This constitutes an attack surface where untrusted data from an external file enters the agent's processing context, although the risk is limited by the 4-byte read constraint.

kordoc-detect-format