The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses Deno scripts (analyze-template.ts, generate-from-template.ts, generate-scratch.ts) to perform file operations. These are executed with explicit permissions (--allow-read and --allow-write) restricted to the filesystem, which is appropriate for a document generation tool.
[EXTERNAL_DOWNLOADS]: The Deno scripts import standard third-party libraries from official registries at runtime, including jszip, xmldom, and the docx library. These are well-known, versioned packages used for document processing.
[INDIRECT_PROMPT_INJECTION]: The skill acts as a processing engine for untrusted external data, specifically DOCX templates and JSON specifications.
Ingestion points: Input DOCX files and JSON configuration files (e.g., spec.json, replacements.json) are read from the filesystem.
Boundary markers: The skill uses specific placeholder patterns (e.g., {{TAG}} or ${tag}) to delimit dynamic content, reducing the risk of instructions being interpreted as data.
Capability inventory: The scripts are limited to filesystem read/write operations and lack network access (--allow-net is not used).
Sanitization: While the scripts treat input strings as literal text for document generation, the underlying docx library provides structure that prevents common injection attacks from escaping the document format.

docx-generator