The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill installs the @turbodocx/html-to-docx library and the optional sharp package from the npm registry. These are official resources provided by the vendor and a well-known image processing library, respectively.
[COMMAND_EXECUTION]: The skill executes standard package manager commands (e.g., npm install, pnpm add, bun add) to install dependencies and uses npx tsc --noEmit to verify the generated TypeScript code. These actions are appropriate for the skill's stated purpose of project setup.
[INDIRECT_PROMPT_INJECTION]: The skill performs project analysis by reading local source files to tailor code generation, which introduces an inherent surface for indirect prompt injection if those files contain malicious instructions.
Ingestion points: SKILL.md instructs the agent to use glob and read to explore the user's project directory in Phase 4.1.
Capability inventory: The agent has the capability to write files to the filesystem and execute shell commands related to package management and type checking.
Boundary markers: No specific boundary markers or "ignore" instructions are defined for the codebase analysis phase.
Sanitization: The skill does not explicitly define sanitization steps for content read from the project files before processing.

turbodocx-html-to-docx