The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses the Bash tool to execute mkdir, mv, and unzip commands to move audio files and extract stems from ZIP archives into a structured album directory.\n- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface where untrusted user input is used in shell operations:\n
Ingestion points: User-provided arguments for <file-path>, <album-name>, and [track-slug] are ingested from $ARGUMENTS in SKILL.md.\n
Boundary markers: Absent. The instructions do not define delimiters or provide guidance to the agent on how to handle malicious shell metacharacters within these inputs.\n
Capability inventory: The skill has the ability to execute shell commands via the Bash tool and interact with the vendor-specific bitwize-music-mcp tool.\n
Sanitization: Absent. Input variables are interpolated directly into shell command templates (e.g., mv "{source_file}" "{resolved_path}/{filename}") which could lead to command injection if a user provides input containing backticks, semicolons, or other shell control characters.

import-audio