The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill is configured to automatically run pip install python-docx at runtime if the dependency is missing. While python-docx is a well-known package, installing packages during execution bypasses environment lockdowns and introduces supply chain risks.
[COMMAND_EXECUTION]: The skill involves generating and running Python scripts at runtime. Specifically, the instruction to run from docx import Document; doc = Document("<路径>") uses direct string interpolation of a user-provided path into a code template. This creates a command injection surface where a specially crafted filename could potentially break out of the string and execute arbitrary Python code.
[INDIRECT_PROMPT_INJECTION]: The skill reads external Word documents and returns their content to the agent's context. There are no defined boundary markers or instructions to ignore potential commands embedded within the document text, which could allow a malicious document to hijack the agent's behavior.
[DATA_EXPOSURE]: The skill provides broad access to the local file system by allowing the user to specify arbitrary paths to .docx files. While the skill checks for the extension, it does not restrict access to specific safe directories.

read-docx