The Agent Skills Directory

[DYNAMIC_EXECUTION]: The script scripts/office/soffice.py dynamically compiles a hardcoded C source string into a shared object file (.so) using gcc at runtime. This shared library is then loaded using the LD_PRELOAD environment variable to intercept and shim system socket calls (socket, listen, accept, close) during the execution of LibreOffice. While this is used for environment compatibility, it is a high-privilege execution pattern.
[COMMAND_EXECUTION]: Several scripts execute external system binaries using subprocess.run. This includes soffice (LibreOffice) and pdftoppm (Poppler) in scripts/thumbnail.py for image generation, git diff in scripts/office/validators/redlining.py for tracking changes, and gcc in scripts/office/soffice.py for compilation.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from .pptx files using the markitdown package and LibreOffice. As documented in the Category 8 evidence chain:
Ingestion points: Untrusted presentation files enter the agent context via python -m markitdown and visual audits in SKILL.md.
Boundary markers: There are no explicit markers or 'ignore' instructions for the extracted text.
Capability inventory: The skill has extensive file system access and command execution capabilities (e.g., scripts/office/pack.py, scripts/thumbnail.py).
Sanitization: No sanitization is performed on the extracted slide content before it is processed by the AI.
[DATA_EXPOSURE]: Some internal scripts, specifically scripts/office/validators/redlining.py and scripts/office/helpers/simplify_redlines.py, utilize the standard xml.etree.ElementTree library to parse slide XML data. Unlike defusedxml (used elsewhere in the skill), standard ElementTree is not hardened against XML External Entity (XXE) or expansion attacks when processing untrusted input.
[EXTERNAL_DOWNLOADS]: The skill requires several external dependencies including markitdown[pptx] (a Microsoft utility), Pillow, and pptxgenjs. These are well-known packages, but the agent is instructed to install them at runtime.

pptx