The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill uses curl to download PDF files from SpeakerDeck's file servers (files.speakerdeck.com).
[COMMAND_EXECUTION]: The skill uses npx to execute the pdfvision package. This package is maintained by the skill's author (yamadashy) and is used for its intended purpose of analyzing slide deck content.
[INDIRECT_PROMPT_INJECTION]: The skill processes content and URLs extracted from external SpeakerDeck pages, which represents a potential attack surface if the extracted content contains malicious instructions.
Ingestion points: Data is extracted from public SpeakerDeck pages using WebFetch in SKILL.md.
Boundary markers: None present; the skill directly interpolates the extracted URL into a shell command.
Capability inventory: The skill uses curl to write to the file system and npx to execute code.
Sanitization: There are no explicit sanitization steps for the {PDF_URL} variable before it is passed to the curl command.

readable-speakerdeck