The Agent Skills Directory

[PROMPT_INJECTION]: The skill's primary function of extracting text from untrusted external PDF files creates a surface for indirect prompt injection. Ingestion points: Content is read from PDF files using scripts such as scripts/extract_form_structure.py and scripts/extract_form_field_info.py. Boundary markers: No explicit delimiters or instructions are used to ensure the agent ignores malicious instructions embedded within extracted text. Capability inventory: The skill allows for file writing and the execution of system-level PDF processing utilities. Sanitization: Extracted text is not sanitized before being returned to the agent's context.
[COMMAND_EXECUTION]: The skill provides instructions for and utilizes several external command-line utilities. Evidence: Instructions are provided for qpdf, pdftotext, pdftk, and magick (ImageMagick) to perform various PDF and image processing tasks. Additionally, scripts/fill_fillable_fields.py performs a runtime monkeypatch on the pypdf library's DictionaryObject.get_inherited method to adjust metadata inheritance logic.

pdf