The Agent Skills Directory

[COMMAND_EXECUTION]: The shell scripts video-project/scripts/generate_audio.sh and video-project/scripts/render.sh execute system commands (python3, npx, ffmpeg) using hardcoded absolute paths that include the author's local username (/Users/xdrshjr/...). This practice exposes the internal environment structure and reduces the portability of the skill.
[EXTERNAL_DOWNLOADS]: The skill fetches PDF documents and images from arxiv.org and huggingface.co. These resources are recognized as well-known academic and technology services.
[INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it processes external scientific papers.
Ingestion points: PDF text extraction (Abstract and Introduction) occurs in scripts/process_papers.py and scripts/process_papers_filtered.py using PyMuPDF (fitz).
Boundary markers: The extracted content is interpolated directly into document headings and paragraphs without boundary delimiters or safety instructions to the agent.
Capability inventory: The skill has file system write access (creating and saving .docx files) and network read access.
Sanitization: A clean_xml function is implemented to remove control characters for XML/Word compatibility, but it does not filter for potential malicious instructions embedded in the paper text.

hf-papers-reporter