The Agent Skills Directory

[DYNAMIC_EXECUTION]: The utility script scripts/soffice.py compiles a hardcoded C source string at runtime using gcc and injects the resulting shared object into the soffice process using the LD_PRELOAD environment variable. This technique is used to bypass environment-specific socket restrictions during document conversion.
[DYNAMIC_EXECUTION]: The script scripts/html2pptx.js launches a Chromium browser instance using Playwright to render and process local HTML files for slide layout extraction.
[COMMAND_EXECUTION]: Multiple scripts including scripts/soffice.py, scripts/thumbnail.py, and scripts/validators/redlining.py execute external system commands such as gcc, soffice, pdftoppm, and git via the subprocess module.
[INDIRECT_PROMPT_INJECTION]: The skill exposes a risk surface for indirect prompt injection by processing untrusted external data files:
Ingestion points: scripts/inventory.py, scripts/replace.py, and scripts/html2pptx.js ingest data from PPTX, JSON, and HTML files.
Boundary markers: Absent; there are no explicit delimiters used when interpolating external content into the final presentation slides.
Capability inventory: The skill possesses extensive capabilities for system command execution (scripts/soffice.py, scripts/thumbnail.py, scripts/validators/redlining.py) and file system writes (scripts/replace.py, scripts/add_slide.py).
Sanitization: While the use of defusedxml provides protection against XML External Entity (XXE) attacks, no additional sanitization is applied to the content of the data being processed or written to output files.
[EXTERNAL_DOWNLOADS]: The skill documentation identifies several external Python and Node.js dependencies required for its document processing and rendering features.

pptx