The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses subprocess.run to interface with the xberg utility. The implementation passes arguments as a list and specifically avoids shell=True, which prevents shell injection attacks from malformed filenames or parameters.
[INDIRECT_PROMPT_INJECTION]: As the skill ingests and processes external PDF documents for conversion, it naturally has an indirect prompt injection surface. However, the scripts/convert_pdf.py wrapper mitigates this risk by performing structural validation, including verifying contiguous page metadata and reconciling page markers before the content is presented to the agent.
[EXTERNAL_DOWNLOADS]: The skill notes that enabling Korean OCR via PaddleOCR may trigger the download of necessary models. The instructions explicitly mandate that the agent must notify the user of potential network usage and model storage requirements before proceeding.

pdf-to-markdown