The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill converts user-supplied Word documents (theirs.docx) into Markdown for the agent to read and edit. This creates an attack surface where instructions hidden within the document could be executed by the agent upon reading the converted content.
Ingestion points: Processes theirs.docx using pandoc to generate doc.md (SKILL.md).
Boundary markers: Absent; the instructions do not include delimiters or warnings to treat the document content as untrusted text.
Capability inventory: Shell execution (bash), Python execution (python3), and file system writes (SKILL.md).
Sanitization: Absent; no sanitization is performed on the Markdown produced from user documents.
[DYNAMIC_EXECUTION]: The skill uses dynamic execution patterns to perform document manipulation and environment setup.
Evidence: Uses python3 -c for inline execution and `python3
<<'PY'` heredocs to run multi-line Python scripts for document assembly (SKILL.md).
[COMMAND_EXECUTION]: The skill relies on shell commands to install dependencies and execute document conversion utilities.
Evidence: Use of bash snippets for pip install and pandoc file conversion (SKILL.md).

office-files