The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/motion_check.py uses subprocess.run to call ffmpeg for video frame analysis. The execution is handled safely by passing arguments as a list rather than a shell string, mitigating command injection risks.
[DATA_EXPOSURE]: Secret management in scripts/tts_v3.py follows best practices by retrieving the ElevenLabs API key from environment variables or a designated .env file, avoiding hardcoded credentials.
[DYNAMIC_EXECUTION]: The scripts/build_scenes.py script generates an HTML/JavaScript animation timeline based on a JSON manifest. This process includes a comprehensive validation function (validate()) that checks data types, numerical ranges for timings/resolutions, and verifies that image paths point to valid PNG files before proceeding with generation.
[DATA_EXPOSURE]: The script scripts/build_scenes.py employs html.escape when injecting image paths and caption text into the generated index.html, protecting against potential cross-site scripting (XSS) if the generated file is viewed in a browser context.
[SAFE]: The inclusion of scripts/check_skill_md.py serves as a built-in security and policy linter, ensuring that the skill's documentation and references to external hosted tools (like Apify actors) remain strictly within designated "optional" sections and do not become core dependencies.

generate-footage