The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The skill uses sudo commands to add external software repositories (ppa:ubuntu-toolchain-r/test) and install system build dependencies like gcc-13 and g++-13.
[COMMAND_EXECUTION]: The skill executes multiple shell scripts and complex command pipelines, including bash scripts/install.sh vllm and bash sdk/setup_render.sh, which are used to automate the setup of the inference environments.
[EXTERNAL_DOWNLOADS]: The skill downloads various binary and source assets from external domains, including official PaddlePaddle model repositories (paddle-model-ecology.bj.bcebos.com), GitHub source code, and Hugging Face mirrors.
[DYNAMIC_EXECUTION]: The skill generates and executes Python scripts at runtime using heredoc patterns (e.g., `python
<<'PY' ... PY) and command strings (python -c ...`) to verify environment status and model output consistency.
[INDIRECT_PROMPT_INJECTION]: The skill possesses a document parsing attack surface. It ingests untrusted external data (PDFs and images) through the minicpmvocr parse command. While the system uses specific prompts like Text Recognition:, there is an inherent risk that processed documents could contain adversarial instructions that influence the behavior of the vision-language model.

minicpmvocr-sdk