The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses subprocess.run to orchestrate conversion tasks. The main entry point convert.py invokes specialized backend scripts (pdf_to_md.py, doc_to_md.py, etc.) located within the skill's own directory. Additionally, doc_to_md.py utilizes the system utility pandoc as a fallback for document formats not handled natively by Python libraries. These executions are controlled and necessary for the skill's functionality.
[EXTERNAL_DOWNLOADS]: The skill performs network operations to fetch web content (web_to_md.py) and interacts with the MinerU cloud API (pdf_to_md_mineru.py) for advanced PDF processing. The MinerU interaction requires a user-provided API token, which is handled via environment variables or a configuration file, following standard security practices for secret management.
[INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it ingests untrusted data from external URLs and user-uploaded documents to generate Markdown content for the agent to process.
Ingestion points: web_to_md.py (remote URLs), convert.py and specialized conversion scripts (local files including PDF, DOCX, XLSX, etc.).
Boundary markers: The output Markdown includes page break markers (e.g., ) and source metadata, but does not explicitly instruct the agent to ignore instructions embedded within the converted text.
Capability inventory: The skill can write files to the local filesystem, perform network requests to arbitrary URLs, and execute local Python scripts and system binaries via subprocess.run.
Sanitization: The conversion process naturally filters many active content types (like scripts or styles in HTML), but does not sanitize the natural language content which may contain adversarial instructions.
[DYNAMIC_EXECUTION]: check_env.py uses importlib.import_module to verify the presence of required and optional Python dependencies. This usage is restricted to a hardcoded list of well-known libraries (e.g., PyMuPDF, requests, mammoth) and is considered safe for environment diagnostics.

markdown-conversion