The Agent Skills Directory

[DYNAMIC_EXECUTION]: The validation script scripts/doc_tools_check.py utilizes the __import__ function to dynamically verify the installation status of necessary Python libraries. This is a benign implementation used solely for diagnostic purposes, restricted to a predefined list of well-known document processing packages.
[COMMAND_EXECUTION]: The skill uses subprocess.run within its diagnostic script to check for system-level dependencies such as pandoc and soffice (LibreOffice). These calls are restricted to version-checking flags and are necessary for the skill to determine if format conversion capabilities are available on the host platform.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external files (e.g., PDF text extraction, DOCX template filling). While this presents a standard attack surface for indirect prompt injection, the skill includes explicit safety rules for human review and output validation, and it does not interpolate external content into dangerous sinks such as shell execution or network requests.
[EXTERNAL_DOWNLOADS]: The skill documents the use of standard, well-known office automation libraries (e.g., openpyxl, pandas, python-docx) and system tools. It provides users with instructions for installing these from official registries, representing standard development practice rather than a security risk.

document-processing