The Agent Skills Directory

[COMMAND_EXECUTION]: The scripts/render_pdf.mjs script uses child_process.spawn to invoke Chromium for resume PDF generation. The executable path is restricted to standard system locations or a user-defined environment variable. Input paths for the files are sanitized to prevent path traversal.
[EXTERNAL_DOWNLOADS]: The scripts/render_pdf.mjs script includes a fallback mechanism that dynamically imports the playwright library. This may trigger a download of browser binaries if they are not already present in the local cache.
[DATA_EXPOSURE]: The skill manages sensitive SMTP credentials for email outreach. It implements a secure architecture by using the scripts/configure_smtp.mjs script to store passwords in a restricted vault, ensuring they are only accessible to trusted backend scripts and never exposed to the browser-based interface.
[INDIRECT_PROMPT_INJECTION]: The skill processes external data such as resumes and job postings to generate outreach emails. It provides instructions to the agent to prioritize factual extraction over generation, reducing the surface for unintended instruction following from processed content.

kelly-jobhunt