The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-supplied content and data from PowerPoint files to generate HTML slides. This creates a surface for potential indirect prompt injection attacks.
Ingestion points: The skill takes presentation content provided by the user and extracts data from PPTX files via scripts/extract-pptx.py.
Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions when interpolating external content into the HTML templates.
Capability inventory: The skill generates HTML and JavaScript for browser-based display. The extraction script performs local file writes (JSON and images). No network exfiltration or dangerous system-level command execution capabilities are integrated.
Sanitization: There is no mention of sanitizing or escaping the input data before it is rendered into the final HTML presentation.
[EXTERNAL_DOWNLOADS]: The skill's HTML templates and animation guides reference several external resources from well-known providers.
Fetches JavaScript libraries (GSAP, ScrollTrigger, Mermaid, Prism.js) from the cdnjs.cloudflare.com CDN.
Loads web fonts from Google Fonts and Fontshare.
[COMMAND_EXECUTION]: The utility script scripts/extract-pptx.py requires the installation of the python-pptx and Pillow packages to function. It uses standard file operations to read presentation files and write extracted assets to a local directory.

html-slides