The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: A specific code example in the "Batch with Docker" section references an untrusted Docker image repository.
Evidence: docker run --rm -v $(pwd):/data jbar65t83/ocrmypdf ... in SKILL.md.
Context: The legitimate maintainer for this tool is jbarlow83. The inclusion of jbar65t83 (a subtle variation) in an execution command is a pattern associated with typosquatting to deliver malicious payloads via container images.
[EXTERNAL_DOWNLOADS]: The skill encourages downloading and executing code from external repositories.
Evidence: Instructions to pull jbarlow83/ocrmypdf and jbar65t83/ocrmypdf from Docker Hub.
Analysis: While the primary references target the well-known maintainer, the presence of an unverified and suspicious account name creates a high risk of supply chain attack.

ocrmypdf-batch