The Agent Skills Directory

[COMMAND_EXECUTION]: The skill generates presentations by executing a Python script (pptx_template.py) that utilizes the python-pptx library to programmatically build slides.
[EXTERNAL_DOWNLOADS]: The implementation depends on the python-pptx package, which is a widely recognized and well-known library for PowerPoint file manipulation.
[DATA_EXFILTRATION]: Path Traversal Surface: The script uses user-provided variables such as TITLE to construct the output filename. Although spaces are replaced with underscores, the lack of rigorous path sanitization (e.g., checking for ../ sequences) presents a theoretical surface for path traversal, potentially allowing files to be saved outside the designated output/pptx/ directory.
Ingestion points: Variables {{title}}, {{subtitle}}, {{author_name}}, and {{client_name}} in pptx_template.py.
Boundary markers: None present in the Python template to isolate user input from the file path construction.
Capability inventory: Uses os.makedirs and prs.save (file write operations) in pptx_template.py.
Sanitization: Minimal; only replaces spaces with underscores in the TITLE variable.

pptx-creator