The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill provides instructions to download the vhs recording tool and the ttyd terminal emulator from their official GitHub repositories using the Go package manager. It also supports installation via standard package managers like Homebrew and Nix.
[REMOTE_CODE_EXECUTION]: The skill facilitates the installation and execution of code from external sources, specifically github.com/charmbracelet/vhs and github.com/aspect-build/aspect-cli, which are established sources for developer tooling.
[COMMAND_EXECUTION]: The primary function involves executing the vhs command-line utility to process tape scripts. It also utilizes common system commands such as which, test, ls, and file for environment checks.
[PRIVILEGE_ESCALATION]: The instructions for WSL2 environments suggest using sudo apt install to install necessary system fonts, which requires administrative privileges.
[INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect injection as it processes and executes commands from external .tape files.
Ingestion points: The skill reads tape file contents from the local filesystem (e.g., SKILL.md Phase 1).
Boundary markers: There are no specific delimiters or instructions to ignore embedded malicious commands within the processed files.
Capability inventory: The vhs tool executes shell commands, types text, and manages terminal states based on the tape file input.
Sanitization: The workflow includes a vhs validate step to verify the tape file's syntax prior to recording.
[DATA_EXFILTRATION]: The skill documents the --publish option for the vhs tool, which transmits the generated recording to a public web service located at vhs.charm.sh.

vhs-recording