The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/md_to_word.py executes several system binaries including pandoc, soffice (LibreOffice), pdfinfo, pdftoppm, and magick. These calls use argument lists through subprocess.run, which is a secure practice that prevents shell injection vulnerabilities.
[EXTERNAL_DOWNLOADS]: The skill uses Pandoc to process Markdown files which may contain references to remote images. Pandoc will attempt to fetch these images from the provided URLs to embed them in the generated Word document. This behavior is consistent with the skill's primary purpose.
[DYNAMIC_EXECUTION]: The script generates a temporary Lua filter at runtime (remove-empty-images.lua) to help Pandoc process images. The generated Lua code is hardcoded and performs a simple check for empty image sources, posing no security risk.

z-md-to-word