The Agent Skills Directory

[COMMAND_EXECUTION]: The Python support scripts check.py and cite.py use the subprocess module to execute local git commands. These operations are restricted to retrieving repository metadata, commit history, and file content needed for generating and verifying slide citations.- [EXTERNAL_DOWNLOADS]: Documentation within the skill provides instructions for optional, user-controlled installation of well-known third-party tools, specifically @mermaid-js/mermaid-cli and playwright, to enable diagram rendering and headless browser verification.- [INDIRECT_PROMPT_INJECTION]: The skill processes repository files and user-supplied HTML decks which could potentially contain untrusted data. It addresses this risk by providing the agent with specific protocols for HTML-escaping content, visually verifying rendered slides, and performing comprehensive redaction scans for secrets.- [SAFE]: The skill implements proactive security controls, including an explicit blocklist for sensitive paths (e.g., .ssh, .aws, .env) and rigorous path-resolution checks to ensure that file-reading operations remain confined to the intended repository directory.

slideops