The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources within the repository to populate video content, creating a vulnerability surface.
Ingestion points: The agent reads source code (e.g., src/tests/*.test.ts), pull request metadata via the GitHub CLI (gh pr view), and evaluation writeups stored in the agent's filesystem (SKILL.md).
Boundary markers: There are no instructions or delimiters provided to ensure the agent ignores or escapes malicious prompts that might be embedded in the files it reads from the repository.
Capability inventory: The skill has extensive capabilities, including shell access for tool execution (git, ffmpeg, bun), file system write access, and the ability to generate public URLs via platform sharing tools.
Sanitization: No sanitization or validation steps are defined for the data extracted from repository files before it is used in the video generation script.
[DYNAMIC_EXECUTION]: The core functionality of the skill relies on generating and running code at runtime.
The skill instructs the agent to write a TypeScript file (facts.ts) and execute it using bun to extract live data (SKILL.md).
The agent generates an ad hoc HTML5 Canvas file (reel.html) which is then executed and rendered via a Playwright/Chromium engine.
[EXTERNAL_DOWNLOADS]: The skill downloads software and media assets from external sources.
It fetches music assets from incompetech.com and OpenGameArt using the fetch-music.sh script.
It utilizes a setup.sh script from a community template to install system packages including ffmpeg, playwright, and python3-numpy (SKILL.md).
[COMMAND_EXECUTION]: The procedure involves executing various system-level commands and tools to process media and repository data.
Uses git fetch and gh to retrieve remote repository states and pull request information.
Uses ffmpeg for video encoding, audio processing, and creating contact sheets.
Uses playwright to automate browser interactions and capture frames from the generated HTML content.
[DATA_EXFILTRATION]: The skill uses platform tools to make internal data publicly accessible.
The agent-fs share-create command is used to generate public links for the produced videos, which contain data derived from private repository contents (SKILL.md).

open-prompt-showreel