The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-supplied data, including project documents, source code, and Office materials (handled by scripts/office_to_markdown.py), to extract patentable innovations.\n
Ingestion points: Local project files, source code, and Office documents (.docx, .pptx, .ppsx) in the skill's environment are read and converted to text for analysis by the agent.\n
Boundary markers: The skill includes instructions in SKILL.md to establish an "evidence list" and perform "material tracing" to separate user facts from inferences, though it lacks explicit technical delimiters for all ingested content.\n
Capability inventory: The agent can execute shell commands through Python subprocess calls in scripts/generate_figures.py, scripts/check_dependencies.py, and scripts/create_cnipa_reference_doc.py; write files to the local directory in scripts/generate_docx.py, scripts/generate_figures.py, scripts/office_to_markdown.py, and scripts/revision_log.py; and perform network operations via package installation in scripts/setup_env.sh.\n
Sanitization: Text extraction from Office files uses standard XML parsing in scripts/office_to_markdown.py, and the document generator in scripts/generate_docx.py includes Markdown normalization and title sanitization.\n- [COMMAND_EXECUTION]: Several scripts (scripts/generate_figures.py, scripts/check_dependencies.py, scripts/create_cnipa_reference_doc.py) use the Python subprocess module to execute external binaries like pandoc and mmdc (Mermaid CLI). These executions use parameters derived from analyzed content, which is a potential command injection vector if not properly handled by the underlying utilities.\n- [EXTERNAL_DOWNLOADS]: The scripts/setup_env.sh script installs Python dependencies (pypandoc, matplotlib) using pip. It defaults to a well-known PyPI mirror (mirrors.tuna.tsinghua.edu.cn) for package distribution.\n- [DYNAMIC_EXECUTION]: The script scripts/generate_figures.py dynamically generates Mermaid diagram code from technical descriptions and uses the mmdc utility to render it into image files. This represents a low-risk dynamic code generation and execution pattern.

aj-patent-disclosure-cn