The Agent Skills Directory

[COMMAND_EXECUTION]: The skill automates Microsoft PowerPoint using PowerShell wrappers that interact with the PowerPoint COM (Component Object Model) interface. This involves launching the PowerPoint application and executing commands to manipulate presentations.
[COMMAND_EXECUTION]: In scripts/office/validators/redlining.py, the skill uses Python's subprocess.run to call the git diff command. This is used to compare word-level differences between document revisions and is executed on temporary files with controlled arguments.
[INDIRECT_PROMPT_INJECTION]: The skill acts as a surface for processing untrusted data from .pptx files. While it uses defusedxml in its core validation logic to mitigate XML-based attacks, some secondary scripts like check_text_overflow.py and inspect_metadata.py use the standard xml.etree.ElementTree library, which possesses a theoretically larger attack surface for XML External Entity (XXE) vulnerabilities.

pptx-win