The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill downloads the @volcengine/kickart-open-mcp package from the NPM registry at runtime using npm exec. This is a vendor-owned package belonging to Volcengine (a ByteDance unit).
[COMMAND_EXECUTION]: Shell commands are executed via the KickArt CLI to manage authentication, upload materials, and submit video generation tasks. The instructions include explicit safeguards against shell injection by requiring parameters to be passed independently without manual string concatenation.
[INDIRECT_PROMPT_INJECTION]: The skill processes user-provided inputs, such as product URLs and creative prompts, which are passed to the video generation tool. Ingestion points: Product URLs and creative prompts in SKILL.md and references/一键成片指南.md. Boundary markers: Instructions mandate mapping inputs to specific CLI flags and warn against shell interpolation. Capability inventory: Execution of shell commands via npm exec for video generation and querying. Sanitization: Relies on the CLI tool's parameter handling and explicit guidelines to avoid shell splicing.
[DYNAMIC_EXECUTION]: The skill utilizes npm exec to dynamically fetch and execute a specific version (1.0.x) of the @volcengine/kickart-open-mcp package. This is a standard mechanism for using vendor-provided CLI tools.

byted-kickart-marketing-material-generator