The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/fill_official_hwp.py executes an external command-line utility using subprocess.run. It specifically calls npx k-skill-rhwp to perform text insertion into HWP document cells. This execution is used for the skill's primary purpose and avoids using a shell (shell=False), which mitigates common injection risks.
[EXTERNAL_DOWNLOADS]: The skill instructions and scripts use npx to fetch and run packages (@nomadamas/k-skill and k-skill-rhwp) from the npm registry. These resources are associated with the skill's developer ecosystem and are retrieved from a well-known service.
[INDIRECT_PROMPT_INJECTION]: The skill processes user-provided data to populate corporate registration templates. While this creates a vulnerability surface where untrusted data enters the document generation pipeline, the risk is minimized by the skill's specific focus on document automation and its explicit instructions to avoid processing sensitive credentials in plaintext.

corporate-registration-consulting