The Agent Skills Directory

[SAFE]: The skill performs legitimate document processing tasks. The provided Python script is a complete implementation of a Markdown-to-PDF engine using the well-known reportlab library.
[EXTERNAL_DOWNLOADS]: The skill requires the reportlab library, which is a standard, widely-trusted industry package for PDF generation. It does not download any untrusted remote scripts or binaries.
[COMMAND_EXECUTION]: The skill executes a local Python script (md2pdf.py) to perform the conversion. Analysis of the script shows it uses standard library functions for file I/O and text processing without any dangerous system calls or shell injection vulnerabilities.
[DATA_EXFILTRATION]: There are no network operations or external data transmissions. All processing is performed locally on the user's files.
[PROMPT_INJECTION]: The instructions do not contain any attempts to bypass agent safety filters or override system instructions. The use of AskUserQuestion is an appropriate way to handle interactive user configuration.
[INDIRECT_PROMPT_INJECTION]: While the skill processes external Markdown data, it includes proper sanitization (HTML entity escaping) before passing content to the PDF rendering engine to prevent formatting-based injection attacks.

md2pdf