The Agent Skills Directory

[COMMAND_EXECUTION]: The skill relies on external rendering tools (e.g., rsvg-convert, resvg, imagemagick, inkscape) to convert SVG files to PNG and ICO formats. These tools are invoked via the subprocess.run function in scripts/export_icons.py using list-based arguments to prevent shell injection vulnerabilities.
[INDIRECT_PROMPT_INJECTION]: As the skill processes externally provided SVG files, there is a risk of ingesting malicious content designed to exploit renderers or AI behavior. The script scripts/export_icons.py mitigates this via a security preflight check that identifies and rejects SVGs containing scripts, foreign objects, or external references (e.g., <script>, javascript:, http://) before processing.

icon-export