The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the user to clone an external GitHub repository (https://github.com/hugohe3/ppt-master) and install its dependencies via pip install -r requirements.txt. This repository belongs to an unknown third-party user and is not identified as a trusted organization or well-known service.
[INDIRECT_PROMPT_INJECTION]: The skill defines a workflow where the agent generates SVG content based on user input, which is then processed by the ppt-master tool to export a presentation. This creates a vulnerability surface if the underlying tool does not safely handle malicious inputs embedded in the document data.
Ingestion points: rc.ppt.init parameters and slide SVG contents generated in the project directory (e.g., projects/my-deck).
Boundary markers: None specified; there are no instructions to the agent to delimit or ignore instructions embedded within the generated slide contents.
Capability inventory: The skill executes a local Python-based pipeline to generate PPTX files and interacts with the filesystem via the pptRoot path.
Sanitization: No sanitization or validation of the SVG content or project parameters is mentioned before being passed to the presentation export stage.

ppt-master