The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/mediasoup.py utilizes subprocess.run to execute the git clone command when the user requests to download the demo. The command is implemented using a list of arguments rather than a raw shell string, effectively mitigating shell injection risks.
[EXTERNAL_DOWNLOADS]: The skill fetches the official mediasoup reference demo from the versatica/mediasoup-demo repository on GitHub. It also guides the user to install the mediasoup package using standard Node.js package managers.
[DYNAMIC_EXECUTION]: The quickstart feature in scripts/mediasoup.py programmatically generates server.js and package.json files within a user-specified directory. This dynamic file creation is the primary intended functionality of the scaffolding tool and does not incorporate untrusted external input into the code templates.
[INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided arguments, such as directory paths and port numbers, which are interpolated into file paths and configuration templates. While this presents a surface for potential injection, the risk is low as the generated code is localized to the user's project directory and intended for development use.

webrtc-mediasoup