The Agent Skills Directory

[SAFE]: The skill implements robust XML security measures.
It uses the defusedxml library for all ElementTree and minidom parsing.
Entity expansion and DTD loading are disabled, preventing XXE and Billion Laughs attacks.
[SAFE]: Archive processing is secured against resource exhaustion.
The _validate_archive and _validate_members functions enforce strict limits on ZIP member count, uncompressed size, and compression ratios to defend against decompression bombs.
Symlinks within the archive are detected and rejected to prevent unauthorized file system access.
[SAFE]: File system interactions are restricted to the local workspace.
The _workspace_path utility ensures all input and output paths are relative to the current working directory, preventing directory traversal attacks.
[SAFE]: No data exfiltration or network activity was identified.
The scripts perform all analysis locally and do not utilize any networking libraries or external command-line tools like curl or wget.

pptx-reference-deck-analysis