The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted content from local files and remote Google Documents during synchronization and conversion.
Ingestion points: Selected local files (Markdown, Text, HTML, EPUB) and remote Google Drive content tracked in the index (scripts/drive_sync/sync_plan.py).
Boundary markers: The application uses strict format-specific parsers (Markdown-it, HTMLParser, ElementTree) and mapping logic to identify and rewrite text runs while preserving structural metadata (scripts/drive_sync/conversion.py, scripts/drive_sync/html_conversion.py, scripts/drive_sync/epub_conversion.py).
Capability inventory: The skill has the capability to write to the local filesystem (scripts/drive_sync/sources.py), execute internal worker processes (scripts/drive_sync/conversion_process.py), and perform network operations via authorized Google API sessions (scripts/drive_sync/google.py).
Sanitization: To mitigate risks from untrusted data, the skill executes its rendering and patching logic within a dedicated worker process. This worker is restricted by POSIX resource limits (CPU, memory, output file size) and runs with a cleared environment to prevent credential leakage or execution side effects (scripts/drive_sync/conversion_worker.py).
[COMMAND_EXECUTION]: The skill utilizes subprocesses for its internal conversion logic and testing infrastructure.
The 'conversion_process.py' module spawns a internal 'conversion_worker.py' process using 'subprocess.run'. This is used as a security boundary to isolate the parsing of untrusted file formats. It uses a restricted environment and non-shell execution.
Test scripts ('tests/epub_conformance.py') may invoke external tools like Java for EPUB validation, but these are limited to the development environment.
[EXTERNAL_DOWNLOADS]: The skill manages dependencies through 'uv.lock' and 'pyproject.toml', referencing standard Python packages from established registries like PyPI.
Communication is performed exclusively with 'www.googleapis.com' for synchronization and authentication tasks. This is standard behavior for the tool's primary purpose of Google Drive integration.

writing-sync