The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses subprocess.run() in its testing and verification scripts (smoke_autotag.py, test_autotag.py, and verify-pdf.py). These calls are used for intended development workflows, such as running internal unit tests or executing the optional verapdf compliance auditor when present on the system.
[EXTERNAL_DOWNLOADS]: The autotag.py script can fetch remote PDFs when the --url argument is used. However, this is implemented safely via client-side downloads with explicit validation: it requires HTTPS, rejects non-public IP addresses (anti-SSRF), and enforces a 150 MiB file size limit.

remediate-pdf