The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes external HTML presentation decks to identify selectors and navigation logic, which could contain indirect instructions aimed at the agent.
Ingestion points: The skill instructions direct the agent to use read_file on HTML slide decks to identify navigation logic and selectors (SKILL.md).
Boundary markers: No explicit delimiters or instructions are provided to the agent to ignore potentially malicious embedded content within the HTML files.
Capability inventory: The skill invokes the gen_pptx tool, which has the capability to execute JavaScript expressions and generate file downloads.
Sanitization: There is no mention of sanitizing or validating the contents of the HTML files before they are parsed by the agent or processed by the tool.
[DYNAMIC_EXECUTION]: The skill uses the gen_pptx tool to execute JavaScript expressions within the context of the presentation deck's iframe.
The agent is instructed to determine specific navigation strings (e.g., document.querySelector('deck-stage').goTo(N)) from the deck's code and pass them to the tool's showJs parameter for execution.

export-as-pptx-editable