The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/create_pptx.py invokes an external image generation script using subprocess.run. The command is constructed using a list of arguments rather than a shell string, which prevents shell injection vulnerabilities.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input from markdown and JSON files to generate slide content and image prompts.
Ingestion points: scripts/create_pptx.py reads data from files provided via --outline or --json arguments.
Boundary markers: The skill does not use explicit delimiters or warnings to prevent the AI from following instructions embedded in the outline data.
Capability inventory: The skill can execute local scripts via subprocess.run and write files to the disk using prs.save().
Sanitization: Input strings are used directly for slide text and as arguments for image generation without specific sanitization against prompt injection.
[EXTERNAL_DOWNLOADS]: The skill specifies dependencies in PEP 723 blocks (including python-pptx, httpx, pyyaml, and Pillow). These are standard library dependencies for the skill's stated purpose and are fetched from official registries.

pptx-creator