The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides numerous instructions for installing project dependencies using standard package managers (npm, bun, yarn, pnpm) and the Remotion CLI (e.g., npx remotion add @remotion/three in rules/3d.md and rules/audio.md). These are legitimate developer environment setup steps.\n- [EXTERNAL_DOWNLOADS]: Several files describe fetching external assets or software necessary for video creation, including:\n
Google Fonts: Fetched via @remotion/google-fonts (rules/fonts.md).\n
Lottie Assets: Example of fetching JSON animations from assets4.lottiefiles.com (rules/lottie.md).\n
Whisper.cpp: Instructions for installing the Whisper.cpp binary and downloading models (e.g., medium.en) for audio transcription using @remotion/install-whisper-cpp (rules/transcribe-captions.md).\n
Sound Effects: References to audio assets on remotion.media and a community resource on GitHub (rules/sfx.md).\n- [DATA_EXFILTRATION]: The skill documents patterns for ingesting untrusted external data which constitutes an indirect prompt injection surface. Evidence includes:\n
Ingestion points: rules/calculate-metadata.md (props.dataUrl), rules/display-captions.md (subtitles JSON), rules/lottie.md (animation JSON), and rules/import-srt-captions.md (SRT files).\n
Boundary markers: None are explicitly defined in the provided code examples to separate external data from agent instructions.\n
Capability inventory: The skill utilizes file system writes (fs.writeFileSync in rules/transcribe-captions.md), network operations (fetch API throughout), and subprocess execution via CLI commands.\n
Sanitization: No explicit sanitization or validation of the fetched external content is shown in the examples. These findings are classified as LOW severity risk surfaces typical of data-driven development tools.\n- [SAFE]: The skill references environment variables for API keys (e.g., REMOTION_MAPBOX_TOKEN and ELEVENLABS_API_KEY) using standard best practices, with no hardcoded secrets or credentials detected.

remotion-best-practices