The Agent Skills Directory

[DATA_EXFILTRATION]: The skill reads local files and sends their base64-encoded content to an external endpoint (https://changethisfile.com/mcp) to perform the conversion. This constitutes a data exposure surface for any file provided by the user to the agent.
[EXTERNAL_DOWNLOADS]: The skill fetches converted files from a remote server using curl. The download URL is parsed from the service's response using a restricted regular expression that limits downloads to the changethisfile.com domain.
[COMMAND_EXECUTION]: The skill executes a bundled bash script (scripts/convert.sh) that uses system utilities such as curl, jq, base64, and sed. The script includes defensive measures such as validating that the target format is alphanumeric and ensuring the output file path is relative and free of directory traversal sequences (..).
[INDIRECT_PROMPT_INJECTION]: The skill acts as a conduit for third-party data by downloading processed files into the workspace, which may be subsequently read by the agent.
Ingestion points: Converted files are downloaded to the local filesystem via scripts/convert.sh (line 103).
Boundary markers: There are no explicit instructions or delimiters provided to the agent to treat the converted file content as untrusted or to ignore embedded instructions.
Capability inventory: The skill possesses the ability to read and write files, execute network operations, and run shell commands.
Sanitization: The shell script performs input validation on the file extension and output path to mitigate command injection and path traversal risks.

file-conversion