The Agent Skills Directory

[COMMAND_EXECUTION]: The skill relies on a local CLI tool (./mm) to orchestrate the video production pipeline, including transcription, previewing, and rendering. Installation and verification are handled by a local script (install.sh) which operates without sudo or root privileges, adhering to the principle of least privilege.
[DYNAMIC_EXECUTION]: The skill utilizes a browser-based capture system (./mm snap) to render HTML/CSS components into image overlays. Security is maintained by disabling network requests and JavaScript execution by default in the authored capture mode, ensuring that synthetic UI components cannot perform unauthorized external actions.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input from video transcripts and external website snapshots. It implements a multi-stage review and validation workflow, requiring the agent to generate and verify a 'fact sheet' and screenplay against a local validator tool before rendering, which helps prevent malicious instructions in the source data from affecting the final output.

magic-moment