The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The setup scripts (scripts/setup.sh and scripts/setup.ps1) fetch the .NET installation script from https://dot.net/v1/dotnet-install.sh. This is an official Microsoft domain used to install the necessary developer framework.
[COMMAND_EXECUTION]: The skill utilizes the dotnet run command to execute document generation and editing tasks. This is the core mechanism of the tool and is used as intended for document processing workflows.
[DYNAMIC_EXECUTION]: To handle complex document structures, the skill allows for the generation and execution of C# script files (.csx). This developer-centric approach is the primary method for performing advanced OpenXML operations and is clearly outlined in the documentation.
[REMOTE_CODE_EXECUTION]: Automated security scanners identified the download of the .NET install script. Analysis confirms the source is a trusted Microsoft service, and the script is used solely for the legitimate purpose of installing the .NET runtime required by the skill.
[PRIVILEGE_ESCALATION]: Setup scripts utilize sudo to install system-level dependencies via package managers and chmod to set script execution permissions. These operations are standard for software installation and are appropriately scoped to the setup phase.

minimax-docx