The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill defines a workspace analysis feature in SKILL.md that ingests untrusted repository content to automatically customize video creation parameters.
Ingestion points: The agent runs git log --oneline -100 and reads local files (README.md, app/models/) to extract project features and context.
Boundary markers: There are no clear boundary markers or instructions to ignore embedded prompts within the files being scanned.
Capability inventory: The skill has extensive execution capabilities including project creation via npx, dependency installation via npm, and multimedia processing via ffmpeg and python tools.
Sanitization: No sanitization or escaping mechanisms are applied to data pulled from the git log or local documentation before it is processed by the agent.
[COMMAND_EXECUTION]: The voiceover script (scripts/generate_voiceover.py) uses subprocess.run to call system utilities (ffmpeg and ffprobe) to perform essential video production tasks, including calculating audio length, generating silence loops, and blending background audio.
[EXTERNAL_DOWNLOADS]: The documentation (README.md) provides setup guidance directing users to manually download dependencies, including referencing the official Homebrew installer shell script on GitHub. This is a standard tech platform installation method and poses no direct automated execution risk.

promo-video