The Agent Skills Directory

[PROMPT_INJECTION]: Detected potential surface for indirect prompt injection where untrusted data is interpolated into templates for PDF generation. * Ingestion points: The invoice_data dictionary in SKILL.md serves as the entry point for data that is rendered into templates. * Boundary markers: There are no delimiters or instructions to ignore embedded commands within the prompt or template interpolation logic. * Capability inventory: The skill utilizes reportlab and weasyprint for document generation and file writing in SKILL.md. * Sanitization: No input validation, escaping, or filtering is implemented before the data is passed to the Jinja2 rendering engine.
[EXTERNAL_DOWNLOADS]: The skill documentation references external repositories on GitHub, specifically nickmitchko/easy-invoice-pdf and the author's own repository claude-office-skills/skills, which are used to provide additional context and resources.

invoice-template