The Agent Skills Directory

[SAFE]: The skill employs secure XML parsing techniques. The unpack.py and pack.py scripts use the defusedxml library, which is a standard mitigation against XML External Entity (XXE) attacks when processing Office documents.
[SAFE]: Command execution is limited to legitimate, documented purposes. The skill uses subprocess.run to call system utilities like soffice (LibreOffice) for document validation and conversion, and pdftoppm for thumbnail generation. These operations are essential to the skill's stated purpose of presentation management.
[SAFE]: The HTML-to-PPTX workflow uses Playwright and Sharp for rendering and image processing. These are industry-standard libraries for these tasks, and the implementation focuses on calculating layout positions without any evidence of network exfiltration or malicious intent.
[SAFE]: No patterns of prompt injection, persistence mechanisms, or credential exfiltration were detected in the instructions or scripts.

pptx