The Agent Skills Directory

[COMMAND_EXECUTION]: The Python scripts scripts/profile.py and scripts/form.py use the subprocess module to execute local PDF utilities such as pdfinfo, qpdf, pdftotext, and pdfimages. These commands are used to profile document metadata, verify file integrity, and perform content transformations. The arguments passed to these tools are derived from user-provided file paths.
[INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest and process external PDF documents. This constitutes an attack surface where instructions embedded in document text (such as hidden layers or metadata) could attempt to influence the agent's logic. The skill incorporates mitigation strategies like mandatory profiling, structural validation with qpdf, and semantic reconciliation of extracted values against invariants.
[EXTERNAL_DOWNLOADS]: In references/recipes.md, the instructions guide the agent to use uv run --with 'pdfplumber>=0.11.10,<0.12' to install a specific version of a well-known PDF library from the official Python package registry when table extraction is required.
[DYNAMIC_EXECUTION]: The skill includes a recipe in references/recipes.md that uses a Python heredoc executed through the uv tool. This pattern involves the dynamic generation and execution of code at runtime to handle complex table parsing that exceeds the capabilities of standard command-line tools.

pdf