The Agent Skills Directory

[DATA_EXFILTRATION]: The skill hardcodes an absolute file path to a sensitive configuration file: /Users/jonathanburger/remotion/packages/remotion-media/.env. Accessing sensitive files (like .env) using absolute paths targeting a specific user's home directory is a high-risk pattern used for credential harvesting.
[CREDENTIALS_UNSAFE]: The instructions explicitly direct the agent to load and use AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY from the local filesystem to perform operations on a remote S3-compatible bucket.
[COMMAND_EXECUTION]: The skill executes a complex inline JavaScript payload via the bun runtime. This script interacts with the filesystem (Bun.file(filePath)) and a remote S3 endpoint using the retrieved credentials.
[COMMAND_EXECUTION]: Uses curl to perform network requests against https://remotion.media/ to verify uploaded assets.

upload-r2