The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/count_pdf_pages.py uses subprocess.check_output to call system utilities like pdfinfo and mdls. These calls are implemented using list-based arguments rather than shell strings, which is a secure practice that prevents command injection even if file paths contain special characters.
[INDIRECT_PROMPT_INJECTION]: The skill processes PDF files to extract metadata (page count). While it ingests untrusted data from PDF files, it only extracts a numeric value and does not parse or interpolate arbitrary text from the document body into the agent's instructions, significantly limiting the surface area for injection attacks.
[EXTERNAL_DOWNLOADS]: The documentation identifies pypdf and pdfinfo as requirements. It provides standard troubleshooting advice for the user to install these dependencies if they are missing, rather than attempting to perform unauthorized or automated installations at runtime.

pdf-page-count