The Agent Skills Directory

[DYNAMIC_EXECUTION]: The script scripts/office/soffice.py performs runtime compilation of a C library and uses library injection.
It writes a hardcoded C source string (_SHIM_SOURCE) to a temporary file.
It invokes gcc to compile this source into a shared object file (.so).
It launches soffice with the LD_PRELOAD environment variable set to the path of the compiled shared object. This shims the system socket API to allow LibreOffice to function in environments where Unix domain sockets are blocked.
[COMMAND_EXECUTION]: Multiple scripts execute external system commands using the subprocess module:
scripts/accept_changes.py and scripts/office/soffice.py execute soffice (LibreOffice).
scripts/office/soffice.py executes gcc for the socket shim compilation.
scripts/office/validators/redlining.py executes git diff to compare text content between document versions.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted document content, which creates a surface for indirect prompt injection attacks.
Ingestion points: Untrusted DOCX files are unpacked in scripts/office/unpack.py and their XML content is read by various validators and scripts.
Boundary markers: The skill does not implement boundary markers or 'ignore' instructions when reading the document content into the agent's context.
Capability inventory: The skill possesses extensive file system access (via scripts/office/pack.py and scripts/comment.py) and command execution capabilities (via soffice and git).
Sanitization: While the skill uses defusedxml to prevent some XML-based attacks, it does not sanitize the natural language content of the documents for embedded instructions that could hijack the agent's execution flow during the editing process.
[EXTERNAL_DOWNLOADS]: The skill's instructions in SKILL.md reference several third-party tools and packages required for full functionality:
It recommends npm install -g docx for document generation.
It relies on well-known services and tools including pandoc (text extraction), LibreOffice (document conversion), and Poppler utilities (pdftoppm).

docx