The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes subprocess.run in scripts/thumbnail.py and ooxml/scripts/pack.py to call soffice (LibreOffice) and pdftoppm (Poppler). These are legitimate uses for converting presentations to PDF and then to image thumbnails.
[COMMAND_EXECUTION]: The script ooxml/scripts/validation/redlining.py executes git diff via subprocess to compare document text content, which is a standard procedure for validating tracked changes.
[EXTERNAL_DOWNLOADS]: The skill documentation lists dependencies on standard, reputable software packages from PyPI (e.g., markitdown, python-pptx, defusedxml) and NPM (e.g., pptxgenjs, playwright, sharp). No untrusted or risky external sources were found.
[PROMPT_INJECTION]: Documentation in SKILL.md uses emphasis (e.g., 'CRITICAL', 'MANDATORY', 'NEVER set any range limits') to ensure technical accuracy during complex XML and HTML processing tasks. These instructions are intended to improve the agent's performance and do not target safety filter bypasses.
[REMOTE_CODE_EXECUTION]: The skill uses playwright in scripts/html2pptx.js to render HTML slides. While powerful, the tool is used locally to process agent-generated content and does not involve executing arbitrary remote code.

pptx