The Agent Skills Directory

[DYNAMIC_EXECUTION]: The script scripts/office/soffice.py contains a hardcoded C source code string (_SHIM_SOURCE) that is written to a temporary file and compiled at runtime using gcc. The resulting shared library is then injected into the execution environment via the LD_PRELOAD environment variable to intercept and shim system calls related to networking and socket management. This technique is used to bypass system restrictions on UNIX sockets in sandboxed environments.
[DYNAMIC_EXECUTION]: The script scripts/accept_changes.py dynamically generates a LibreOffice StarBasic macro (ACCEPT_CHANGES_MACRO) and writes it to a temporary profile directory to automate the process of accepting tracked changes within the application context.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external files (.docx, .pptx, .xlsx) provided by users or retrieved from project directories. This content is converted to XML and processed by the agent, presenting a vector for hidden instructions.
Ingestion points: The scripts/office/unpack.py script extracts XML content from Office documents and merges runs for processing.
Boundary markers: No specific delimiters or "ignore instructions" warnings are used when processing the extracted text from these documents.
Capability inventory: The skill has powerful capabilities including runtime compilation (gcc), Office automation (soffice), and file system manipulation, which could be abused if malicious instructions are successfully injected via a document.
Sanitization: The skill correctly employs defusedxml to mitigate XML-based vulnerabilities like XXE, but it does not sanitize or filter the natural language content within the documents.
[COMMAND_EXECUTION]: Multiple scripts throughout the skill (including soffice.py, accept_changes.py, and redlining.py) use subprocess.run to execute system binaries like soffice, gcc, git, and pdftoppm with dynamically constructed arguments.
[EXTERNAL_DOWNLOADS]: The SKILL.md instructions guide the agent to perform a global installation of the docx package using npm install -g docx to enable document generation capabilities.

docx