The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides numerous shell command templates for using ffmpeg and ffprobe to perform media processing tasks. It also uses printf for file list generation and rm for cleaning up temporary files.
[PRIVILEGE_ESCALATION]: The documentation includes a standard installation command for Ubuntu/Debian systems using sudo apt update && sudo apt install -y ffmpeg. This is an expected and legitimate use of elevated privileges for system software installation.
[INDIRECT_PROMPT_INJECTION]: The skill utilizes ffprobe to extract metadata from video files in JSON format. This presents a potential attack surface where untrusted media files could contain crafted metadata designed to inject instructions into the agent's context.
Ingestion points: Video file metadata processed by ffprobe (SKILL.md, references/operations.md).
Boundary markers: No explicit delimiters or warnings for the agent to ignore embedded instructions are included in the command templates.
Capability inventory: Execution of ffmpeg, ffprobe, printf, and rm via shell.
Sanitization: The skill does not provide methods for sanitizing or validating the output of metadata extraction before it is processed by the agent.

video-edit