The Agent Skills Directory

[COMMAND_EXECUTION] (HIGH): The script scripts/process-file.js is vulnerable to command injection via unsanitized file content.
Evidence: In scripts/process-file.js, the generateAsciiArt function interpolates the text variable directly into a shell command template: execSync(`npx figlet ${fontFlag} "${text}"`, ...). The text variable is extracted directly from the user-provided file content via regex.
Attack Vector: An attacker can provide a file containing a tag such as <figlet>"; malicious_command; #</figlet>, which will execute malicious_command on the host system when processed.
[COMMAND_EXECUTION] (HIGH): The script scripts/list-fonts.js contains an identical command injection vulnerability in its own generateAsciiArt function.
[EXTERNAL_DOWNLOADS] (LOW): The skill uses npx to run the figlet package, which may result in downloading and executing code from the npm registry at runtime.
Evidence: Both process-file.js and list-fonts.js use npx figlet for their core functionality.
Risk: This introduces a dependency on the external npm registry's availability and integrity at execution time.
[PROMPT_INJECTION] (LOW): The skill is susceptible to indirect prompt injection by processing untrusted data that reaches a privileged sink.
Ingestion points: scripts/process-file.js reads arbitrary file content using fs.readFileSync.
Boundary markers: The skill uses <figlet> tags but fails to escape or sanitize the content within them.
Capability inventory: The skill possesses child_process.execSync (shell execution) and fs.writeFileSync (file system write) capabilities.
Sanitization: No sanitization or validation is performed on the extracted tag content before it is passed to the shell.

figlet-text-converter