The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes subprocess.run to execute PDF metadata tools (pdfinfo, pdffonts) and its own internal Python scripts for workflow orchestration. These executions are performed using argument lists rather than shell strings, effectively mitigating command injection vulnerabilities.
[EXTERNAL_DOWNLOADS]: The generate_schematic_ai.py script communicates with the well-known OpenRouter API (openrouter.ai) to generate and review scientific diagrams. This network activity is documented, requires a user-provided API key, and is essential for the skill's core functionality.
[INDIRECT_PROMPT_INJECTION]: The schematic generation feature interpolates user-provided natural language descriptions into prompts for external AI models. While the skill does not use explicit boundary markers or sanitization for this input, the risk is confined to the visual content of the generated image assets and associated review logs.

venue-templates