The Agent Skills Directory

[COMMAND_EXECUTION]: The skill invokes the ffplay utility through a Python wrapper script (scripts/play.py) using subprocess.call. The command is constructed as a list of strings and shell=True is not employed, which is a secure implementation that prevents shell injection vulnerabilities.
[EXTERNAL_DOWNLOADS]: The documentation includes references to playing remote media streams (e.g., HLS playlists via HTTPS). This is a standard and documented feature of the ffplay tool and does not involve the execution of untrusted code.
[SAFE]: No indicators of prompt injection, data exfiltration, or persistence mechanisms were detected. The skill's behavior matches its described purpose as a media playback and debugging utility.

ffmpeg-playback