The Agent Skills Directory

[COMMAND_EXECUTION]: The script ptr.py utilizes subprocess.run to invoke the pdftotext utility for extracting text from downloaded PDF reports. The command is constructed using a list of arguments, which helps prevent shell injection vulnerabilities.
[EXTERNAL_DOWNLOADS]: The skill is designed to download financial disclosure indexes and transaction reports from disclosures-clerk.house.gov, the official public disclosure site for the U.S. House of Representatives. These downloads are necessary for the skill's primary function of tracking public filings.
[INDIRECT_PROMPT_INJECTION]: The skill processes data from external PDF files provided by the House Clerk's office. This introduces a potential surface for indirect prompt injection if a filing were to contain malicious instructions intended for the agent.
Ingestion points: ptr.py fetches ZIP and PDF files from official government URLs and parses their content.
Boundary markers: The skill instructions mandate specific caveats and framing (e.g., stating the filing is a public disclosure and not inside information) when presenting the data to the user.
Capability inventory: The script has the ability to write state information and downloaded PDFs to the trader/state/ directory and perform network read operations. It does not possess autonomous execution or trading capabilities; financial actions are deferred to external tools requiring human confirmation.
Sanitization: The tool uses specific regular expression patterns to extract structured trade data (date, ticker, amount) from the raw text, which provides a layer of structural validation against arbitrary content.

trader-pelosi