The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The scripts/invoice_api.py module is designed to load authentication keys from a .env file or environment variables. This represents a safe and standard implementation for CLI tools to avoid hardcoding secrets.
[EXTERNAL_DOWNLOADS]: The skill requires the user to install well-known and reputable Python libraries, specifically pdfplumber and pillow, to handle document analysis and image generation.
[COMMAND_EXECUTION]: The workflow involves local execution of Python scripts (analyze_pdf.py and render_check.py) that perform file read/write operations and network requests to the invoice-api.xhub.io domain. These activities are transparently documented and align with the skill's primary function as a layout development tool.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted PDF and JSON files for processing. 1. Ingestion points: The analyze_pdf.py script parses local PDF files, and render_check.py reads user-provided JSON and PDF data. 2. Boundary markers: None implemented in the scripts. 3. Capability inventory: File system operations for report generation and network POST requests to the author's API. 4. Sanitization: The skill uses structured extraction via pdfplumber and standard JSON serialization, treating document content as data to be measured rather than instructions for the agent.

invoice-template-from-pdf