The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill fetches remote content via urllib.request.urlopen in scripts/capture_source.py. It mitigates resource exhaustion and server-side request forgery risks by enforcing a 64MB file size limit, implementing a 30-second timeout, and restricting URI schemes to HTTP/HTTPS.\n- [COMMAND_EXECUTION]: The skill uses subprocess.run to invoke the markitdown utility for document conversion. This execution is performed securely by passing arguments as a list rather than a shell string, using the current system executable, and operating within a dedicated temporary staging directory to prevent path traversal.\n- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface as it processes external, untrusted documents which are later accessed by other tools.\n
Ingestion points: Data enters the environment via urllib.request.urlopen (remote) or Path().open (local) within scripts/capture_source.py.\n
Boundary markers: Captured content is isolated in a sources/ directory and tracked via manifest.json metadata; however, no specific delimiters are inserted within the content to warn downstream LLMs of potentially untrusted instructions.\n
Capability inventory: The script possesses capabilities for network reading, local file reading, file writing, and document conversion.\n
Sanitization: Content is converted to Markdown using the markitdown library, but the skill does not perform additional filtering for embedded malicious instructions.

okf-wiki-capture