The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The installation section provides instructions for the agent to execute sudo mv, which requires elevated administrative permissions to move the CLI binary into a protected system directory (/usr/local/bin/).
[EXTERNAL_DOWNLOADS]: The skill instructs the agent to download the cyeam binary directly from the author's GitHub repository using curl. While the source is identified as the vendor's own repository, the manual installation of external binaries bypasses standard package management safety checks.
[COMMAND_EXECUTION]: The skill's primary functionality relies on executing the cyeam CLI tool and an optional external typst binary to perform document conversions.
[DYNAMIC_EXECUTION]: The skill promotes the use of Typst (.typ files), which is a programmable typesetting language. Processing these files involves runtime execution of the Typst source code by the underlying system compiler.
[INDIRECT_PROMPT_INJECTION]:
Ingestion points: The skill ingests and processes Markdown, HTML, and Typst files provided as input to the conversion command.
Boundary markers: There are no explicit instructions or delimiters provided to prevent the agent from accidentally executing malicious instructions embedded within the document content.
Capability inventory: The tool has the capability to read local files, execute conversion processes, and write PDF outputs to the file system.
Sanitization: The skill does not describe any sanitization or validation logic for the input files before they are processed by the conversion engine.

pdf