The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The scripts/render-mv.sh script attempts to use sudo to update package repositories and install system fonts without user intervention.
Evidence: sudo apt-get update -qq &>/dev/null && sudo apt-get install -y -qq fonts-noto-cjk &>/dev/null
[COMMAND_EXECUTION]: The skill executes multiple high-risk system commands for package management and media processing.
Evidence: System package managers apt-get, apk, and dnf are invoked to install font dependencies.
Evidence: Media tools ffmpeg and ffprobe are used for video compression and audio analysis.
Evidence: The skill uses execSync to run npx remotion render with parameters derived from user input.
[EXTERNAL_DOWNLOADS]: The skill may trigger remote downloads of browser binaries required for rendering.
Evidence: As noted in scripts/render.mjs, if a local browser is not found, Remotion attempts to download chrome-headless-shell from Google's servers.
[REMOTE_CODE_EXECUTION]: The skill downloads and executes a browser binary (chrome-headless-shell) at runtime to perform video rendering.
Evidence: The skill's rendering engine (Remotion) automatically fetches and runs a Chromium-based headless shell if a system browser is unavailable.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from multiple sources which could be used as an attack vector if the output is processed by other agent skills.
Ingestion points: Audio files, LRC/JSON lyrics, and CLI arguments for titles/subtitles/credits in scripts/render-mv.sh and scripts/render.mjs.
Boundary markers: The skill does not employ delimiters or warnings to isolate processed text from instructions.
Capability inventory: The skill has extensive capabilities including shell command execution (execSync), file writing, and network access.
Sanitization: Title and subtitle inputs are stripped of newlines and truncated to 50 characters, but lyric content is not validated.
[DATA_EXFILTRATION]: The skill allows for unauthorized data exposure by reading files from arbitrary absolute paths and copying them into the project's public directory.
Evidence: In scripts/render.mjs, the copyFileSync function is used to copy files specified by absolute paths (for --audio or --background) into the public/ folder. This could be exploited to expose sensitive system files by providing their absolute paths as arguments.

acestep-simplemv