The Agent Skills Directory

[COMMAND_EXECUTION]: The scripts/obsconfig.py script executes system commands via subprocess.run to install OBS Studio using platform-specific package managers such as brew, winget, flatpak, or apt-get.
[COMMAND_EXECUTION]: On Linux systems, the installation process utilizes sudo to perform administrative tasks, including adding PPA repositories and installing system packages.
[CREDENTIALS_UNSAFE]: The skill provides mechanisms to read and write OBS service.json files. These files are used by OBS to store sensitive information, including streaming service credentials and plain-text stream keys.
[DATA_EXFILTRATION]: The export subcommand in scripts/obsconfig.py packages the user's entire OBS profile into a ZIP archive. This archive includes sensitive files like service.json, which contains streaming credentials, creating a risk of exposure if the archive is handled insecurely.
[COMMAND_EXECUTION]: The import subcommand in scripts/obsconfig.py extracts files from ZIP archives into the OBS configuration directory. The current implementation lacks strict path validation, which could potentially be exploited through path traversal (e.g., using .. in ZIP entry names) to write files outside the intended profile directory.

obs-config