The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill provides capabilities to read and process external ZIP archives, which can be a vector for indirect prompt injection or filesystem attacks (e.g., Zip Slip).
Ingestion points: ZipArchive.Read(zipPath) is used in SKILL.md, references/getting-started.md, and examples/quickstart.cs to load external archive data.
Boundary markers: The skill explicitly documents the SecureZipPolicy.ResourceLimits feature in references/getting-started.md to protect against untrusted ZIP files.
Capability inventory: The skill allows filesystem writes via item.Extract() and archive.Save() across all instruction files.
Sanitization: The SecureZipPolicy (v26.1+) provides resource limits and a TrustBoundaryViolation event to handle malicious archives.
[DATA_EXPOSURE]: The quickstart example accesses local environment metadata for demonstration purposes.
Evidence: examples/quickstart.cs uses Environment.UserName to add metadata to a generated ZIP entry.
[EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the DevExpress.Document.Processor NuGet package. As this is a primary resource from the skill's author, it is categorized as a safe vendor-provided dependency.

devexpress-office-file-api-zip