The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill references and fetches style template metadata and design documents from the zarazhangrui/frontend-slides repository on GitHub. It also includes functionality to fetch remote video assets via the oma slide asset fetch-video command. These operations target well-known services and are documented as part of the skill's primary functionality.
[COMMAND_EXECUTION]: The skill heavily utilizes the oma slide CLI for deterministic operations including workspace scaffolding, geometric validation using a headless browser (Puppeteer), and exporting decks to PDF, PNG, and PPTX formats.
[INDIRECT_PROMPT_INJECTION]: The skill possesses an ingestion surface for indirect prompt injection by processing external data from PPTX files, Canva designs, and remote style templates (design.md). The skill instructions explicitly mandate treating this data as untrusted, performing sanitization, and logging fetch operations to mitigate risks.
[DYNAMIC_EXECUTION]: The skill dynamically generates HTML slide fragments based on user input and templates. It includes a custom Web Component, deck-stage.js, which is injected into the generated decks to handle runtime scaling, keyboard navigation, and slide transitions.
[SAFE]: The skill implements a controlled auto-provisioning workflow for the Canva Remote MCP. This involves reading and performing additive modifications to local and global MCP configuration files (e.g., .mcp.json, ~/.gemini/config/mcp_config.json) only after obtaining explicit user consent.

oma-slide