The Agent Skills Directory

[DYNAMIC_EXECUTION]: The script scripts/office/soffice.py performs runtime compilation of hardcoded C source code into a shared object file (lo_socket_shim.so) using gcc. This shared object is then loaded via the LD_PRELOAD environment variable to modify the behavior of the soffice (LibreOffice) binary during execution. This technique is used to resolve socket limitations in specific sandboxed environments.
[COMMAND_EXECUTION]: Multiple scripts and instructions within the skill make extensive use of subprocess.run() to execute external system binaries including soffice, pdftoppm, git, and gcc. These are used for core functionality like PDF conversion, image rendering of slide content, and content diffing.
[EXTERNAL_DOWNLOADS]: The skill documentation (SKILL.md) specifies requirements for external Python and Node.js dependencies, such as markitdown[pptx], Pillow, pptxgenjs, and sharp, which are downloaded from public registries.
[INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied PowerPoint files by unpacking and parsing their XML structures. Certain modules, specifically redlining.py and simplify_redlines.py, use the standard xml.etree.ElementTree library for parsing rather than a hardened alternative. The author explicitly identifies this in a security note within redlining.py as a potential vulnerability surface for XML External Entity (XXE) attacks if processing malicious input files.

pptx