The Agent Skills Directory

[DYNAMIC_EXECUTION]: The Node.js script uses a computed file URL (kUrl) constructed from environment variables (process.env.PATH) to dynamically load the kordoc library via import(). This runtime path calculation and execution of code from the file system is a dynamic execution pattern.
[EXTERNAL_DOWNLOADS]: The skill uses npm exec to download and execute the kordoc and pdfjs-dist packages from the NPM registry. While pdfjs-dist is a well-known service for PDF processing, kordoc is an external dependency downloaded at runtime.
[COMMAND_EXECUTION]: The skill executes shell commands via npm exec to run Node.js scripts that interact with the local file system and environment variables.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external documents (.hwp, .hwpx, .pdf), which serves as an attack surface for indirect prompt injection.
Ingestion points: Target documents provided by the user or attached to the session (SKILL.md).
Boundary markers: Not present; the content is parsed and converted to structured JSON without explicit delimiters or instructions to ignore embedded commands.
Capability inventory: The skill uses fs.readFileSync to read local files and console.log to output data (SKILL.md).
Sanitization: No sanitization or validation of the document content is performed before processing.

kordoc-parse-form