The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill uses the npx utility to download and execute the hyperframes package from the NPM registry.
Evidence: npx -y hyperframes@latest init <product-slug>-reddit --yes in SKILL.md.
[EXTERNAL_DOWNLOADS]: The video composition template loads the GSAP animation library from a public content delivery network.
Evidence: <script src="https://cdn.jsdelivr.net/npm/gsap@3.14.2/dist/gsap.min.js"></script> in references/composition-template.html.
[REMOTE_CODE_EXECUTION]: The initialization process involves executing code downloaded at runtime from the NPM registry.
Evidence: Usage of npx -y hyperframes@latest init within the Bash tool instructions.
[COMMAND_EXECUTION]: The skill utilizes several command-line interface tools to manage the project lifecycle and render video files.
Evidence: Instructions to use node, ffmpeg, npx hyperframes lint, and npx hyperframes render via the Bash tool.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from the web and local environment, which serves as a potential vector for indirect prompt injection.
Ingestion points: Fetches product context from user-supplied URLs via WebFetch and reads project files like tailwind.config.js and .agents/brand-kit.json using the Read tool.
Boundary markers: The instructions do not specify the use of delimiters or 'ignore' commands when processing the retrieved external content.
Capability inventory: The skill is configured with access to shell execution (Bash), filesystem operations (Read, Write, Edit), and network access (WebFetch).
Sanitization: No explicit sanitization or validation of the fetched web content is performed before it is used to derive marketing beats and scripts.

reddit-launch-video