The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses the Bash tool to execute a bundled Node.js script (scripts/run_ppt_task.mjs). This script manages the lifecycle of slide generation, including task creation, file uploading, and status polling.
[EXTERNAL_DOWNLOADS]: The script communicates with openapi.felo.ai to send prompts and upload files for processing. These network operations are directed at the vendor's official infrastructure and are required for the skill's primary functionality.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input and local files (images, PDFs, documents) through the --query and --file arguments of the script. While this presents an ingestion point for potentially malicious instructions embedded in data, the script properly encapsulates these inputs in structured multipart/form-data or JSON payloads, and the risks are inherent to the slide generation use case.

felo-slides