The Agent Skills Directory

[COMMAND_EXECUTION]: The instructions require the agent to perform system-level software installation using sudo (sudo apt-get install -y poppler-utils). This involves acquiring administrative privileges to modify the system state.
[COMMAND_EXECUTION]: The workflow utilizes shell-based rendering commands (pdftoppm) that operate on external files. This creates a potential vector for command injection if input parameters such as filenames are not strictly sanitized.
[EXTERNAL_DOWNLOADS]: The skill fetches and installs external dependencies including Python packages (reportlab, pdfplumber, pypdf) and the poppler system tool to support its core functionality.
[PROMPT_INJECTION]: The skill processes untrusted PDF documents, creating an indirect prompt injection attack surface.
Ingestion points: Text extraction and visual rendering of PDF files as defined in the Workflow section of SKILL.md.
Boundary markers: The instructions lack explicit delimiters or warnings to ignore instructions embedded within processed documents.
Capability inventory: The agent is granted shell execution capabilities (pdftoppm), file system write access (output/pdf/), and the ability to install software.
Sanitization: There are no documented procedures for sanitizing or validating the content extracted from external PDF sources.

pdf