The Agent Skills Directory

[SAFE]: The skill operates as a diagnostic tool for presentation projects, focusing on static analysis of project artifacts without destructive actions.
[SAFE]: Tool availability checks (e.g., node, marp, d2) use spawnSync with hardcoded --version flags, ensuring no risk of command injection or arbitrary execution.
[SAFE]: File system operations are scoped to the project directory provided by the user. The report generation feature includes explicit path validation to prevent directory traversal outside of the project folder.
[SAFE]: No network communication, credential access, or persistence mechanisms were detected in the skill's logic.
[SAFE]: The use of Base64 encoding in HTML fixtures is limited to standard SVG data URIs for UI icons and does not contain hidden commands or malicious payloads.
[SAFE]: PDF parsing logic uses standard decompression to verify export parity and does not introduce security vulnerabilities.

presentation-validation