The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructions and scripts reference official Dynamsoft SDK packages from standard registries (e.g., pip install dynamsoft-capture-vision-bundle). These are well-known commercial SDKs and the downloads are documented neutrally as required for trusted sources.
[COMMAND_EXECUTION]: Several Python scripts (validate_dbr_template.py, harness_py/main.py, etc.) utilize subprocess or similar logic to execute internal SDK methods and image processing commands via OpenCV. These operations are restricted to the local environment and are used for the skill's primary purpose of barcode optimization.
[DATA_EXFILTRATION]: The skill facilitates data extraction (barcode text, MRZ fields) from local image files provided by the user. There are no patterns detected for sending this data to non-whitelisted or unauthorized external domains. Network operations are limited to license validation with Dynamsoft's official servers.
[INDIRECT_PROMPT_INJECTION]: The skill processes external image files and ground truth JSON files. While these are ingestion points for untrusted data, the skill uses these files strictly for recognition engine input and metric calculation. The use of structured data (JSON) and isolated recognition pipelines provides inherent boundaries against instruction injection via these channels.

dynamsoft-sdk