The Agent Skills Directory

[COMMAND_EXECUTION]: The scripts/encode_gif.py script executes local media utilities ffmpeg and ffprobe via the subprocess module. The implementation is secure as it avoids shell invocation (shell=True is not used) and applies strict type validation to all numeric arguments (such as FPS, playback speed, and timestamps) before passing them to the command line.
[EXTERNAL_DOWNLOADS]: The skill instructs the agent to use git and gh CLI tools for repository operations and artifact publication. These network operations are standard developer workflows targeting the repository's official remote and GitHub's attachment services.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted browser content (via screenshots and video) and pull request data, which constitutes an attack surface for indirect prompt injection. Mitigation is provided through mandatory isolation of recording environments (fresh scratch roots and isolated browser profiles) and the use of a quoted manifest generator in the encoding script to prevent path-based injection into the media pipeline.

record-browser-gif