The Agent Skills Directory

[COMMAND_EXECUTION]: The skill recommends the use of 'sudo apt-get install' for installing system dependencies. Commands using 'sudo' grant administrative access to the host system, which is a high-risk privilege escalation pattern.- [PROMPT_INJECTION]: The skill enables processing of untrusted PDF files, creating a surface for indirect prompt injection. * Ingestion points: External PDF documents (e.g., 'document.pdf', 'scanned.pdf') ingested by the agent via CLI tools. * Boundary markers: Absent; the skill does not provide delimiters or instructions to the agent to disregard instructions potentially embedded within the documents. * Capability inventory: The skill allows for various subprocess executions including 'pdftotext', 'qpdf', and 'ghostscript' for file manipulation. * Sanitization: No input validation or content sanitization is implemented, which could allow specially crafted files to exploit vulnerabilities in PDF parsers or inject malicious instructions into the agent's context.

pdf-tools