The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The skill instructs the execution of sudo apt-get install -y poppler-utils. The use of sudo allows for administrative privilege escalation within the host environment.
[INDIRECT_PROMPT_INJECTION]: The skill possesses a significant attack surface by ingesting untrusted PDF data.
Ingestion points: The skill reads and renders PDF files provided as $INPUT_PDF.
Boundary markers: No delimiters or ignore instructions are defined for the content of the processed PDFs.
Capability inventory: The skill has the ability to execute shell commands (pdftoppm) and perform file system writes to tmp/pdfs/ and output/pdf/.
Sanitization: No sanitization or structure validation is performed on the incoming PDF files before they are passed to system utilities.
[COMMAND_EXECUTION]: The skill uses shell command execution via pdftoppm -png $INPUT_PDF $OUTPUT_PREFIX. If the input filename variables are derived from untrusted sources without sanitization, this could lead to command injection.

pdf