The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill fetches Node.js binaries and CLI tools from well-known repositories such as nodejs.org and the npm registry. It also provides fallbacks to established mirror services like Alibaba's npmmirror.
[COMMAND_EXECUTION]: It executes multiple shell commands for environment preparation, including extraction of archives, package installation via npm, and integrity verification using checksums.
[PERSISTENCE]: The setup instructions include steps to modify the user's shell configuration file ('~/.bashrc') to persistently add local binary paths to the system environment.
[INDIRECT_PROMPT_INJECTION]: The skill features capabilities like 'video-inspire' that ingest data from external sources (e.g., Douyin or TikTok video links). This creates a potential attack surface where malicious instructions could be embedded in the external content. -- Ingestion points: 'resourceUrl' and 'playVideo' parameters in SKILL.md. -- Boundary markers: No delimiters or explicit instructions were found to isolate the external content. -- Capability inventory: The skill has the ability to execute CLI tools and potentially run shell commands for image/video processing. -- Sanitization: No specific sanitization or filtering logic is mentioned for the content retrieved from external URLs.

linkpix