The Agent Skills Directory

[SAFE]: The skill utilizes the official @volcengine/las-cli package and associated las-cli commands. These are legitimate resources belonging to the vendor (ByteDance/Volcengine) and are necessary for the skill's stated video understanding functionality.
[SAFE]: The instructions include a specific security warning to never ask users for AccessKey or SecretKey, which aligns with security best practices for credential management.
[COMMAND_EXECUTION]: The skill performs shell operations using las-cli to handle video uploads, price estimation, and processing tasks. These commands are scoped to the primary purpose of the skill.
[INDIRECT_PROMPT_INJECTION]: The skill ingests external data in the form of video_url and text inputs which are passed to the LAS CLI. While this represents a data ingestion surface, the risk is managed through the use of specific tool parameters and the vendor's processing backend.

byted-las-vlm-video