The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The scripts/install_fonts.py script attempts to modify the Windows Registry under HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Fonts and writes files to the system font directory C:\\Windows\\Fonts. These operations are used to register and install official fonts but require elevated (administrator) privileges on the host system.
[COMMAND_EXECUTION]: The scripts/install_fonts.py script calls os.system(\"fc-cache -fv\") to refresh the system font cache on Linux/Unix-like systems.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user input for document elements (such as title and body) through scripts/dialog_manager.py and interpolates this content into generated Word documents.
Ingestion points: User-supplied document content collected via the dialog system in scripts/dialog_manager.py.
Boundary markers: The skill lacks explicit delimiters or instructions to prevent the agent from obeying commands embedded within the user-provided document text.
Capability inventory: The skill has file-writing capabilities using the python-docx library within document_generator.py and scripts/generate_official_doc.py.
Sanitization: There is no evidence of input validation or sanitization to filter out malicious prompt instructions in the processed data.

official-doc-writer