The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill fetches resources from external providers to facilitate presentation setup and content gathering. scripts/install.sh downloads open-source font files from Google's official GitHub repository and other public font releases. scripts/serper_images.py searches and fetches image assets from the web using the Serper API and direct HTTP(S) URLs. Additionally, scripts/export_pptx/html_to_pptx.mjs downloads and installs the Chromium browser and Node.js dependencies at runtime.
[COMMAND_EXECUTION]: Extensive use of shell command execution is present to coordinate various utilities and scripts. Python scripts frequently use subprocess.run to invoke local helpers (deck.py, render.py, font_bundle.py) and system tools such as LibreOffice, FFmpeg, and pyftsubset. The Node.js exporter in scripts/export_pptx/ uses execSync to perform setup tasks like installing npm packages and the Playwright browser.
[DYNAMIC_EXECUTION]: scripts/render.py utilizes importlib to dynamically load the Playwright library. It implements logic to search for and load the module from paths determined at runtime, including environment variables like PPT_SKILL_PLAYWRIGHT_PATHS and temporary installation directories, which is used to manage dependencies across different hosting environments.
[INDIRECT_PROMPT_INJECTION]:
Ingestion points: scripts/stage_materials.py parses and extracts text from untrusted user-supplied attachments (including PDF, Word, Excel, and ODF files) to populate the agent's context for slide generation.
Boundary markers: Extracted content is organized into Markdown files and segmented into chunks, but there are no explicit instructions or delimiters for the agent to ignore potentially malicious content within these documents.
Capability inventory: The skill has broad capabilities including file writing, network requests, and arbitrary command execution through subprocess calls.
Sanitization: Content is extracted using established libraries (e.g., MarkItDown, pdfminer), but the raw text is passed directly into the agent's workflow without further sanitization or filtering.

sn-ppt-standard