The Agent Skills Directory

[COMMAND_EXECUTION]: The skill makes extensive use of subprocess.run across several utility scripts (assemble_timeline.py, mix_audio.py, qc_media.py, tts_adapter.py) to interface with FFmpeg and FFprobe. These calls are properly parameterized using argument lists, which prevents shell injection vulnerabilities.
[EXTERNAL_DOWNLOADS]: scripts/preflight.py performs a network request to http://localhost:8188 (or a user-defined ComfyUI URL) to verify service availability. This is a standard health check for the required local backend and does not involve exfiltration of sensitive data.
[REMOTE_CODE_EXECUTION]: The skill includes a dedicated profile_tool.py script that validates production profiles. It enforces a security policy by rejecting files containing executable-looking keys such as exec, shell, or script, mitigating risks of malicious configuration injection.
[SAFE]: The project initialization script (init_project.py) manages user-provided assets using secure methods. It implements file type validation, path sanitization via slugification, and SHA-256 hashing to ensure integrity and prevent directory traversal during the ingestion process.

minimax-h3-drama-producer