The Agent Skills Directory

[DATA_EXFILTRATION]: The embed_images function in scripts/narrator_core.py is vulnerable to path traversal. It processes image tags starting with /pics/ but fails to sanitize parent directory sequences (..). This allows a malicious Markdown file to include and expose sensitive local files by embedding them as Base64 strings in the generated HTML.
[EXTERNAL_DOWNLOADS]: Fetches ONNX models and configuration files from ModelScope (modelscope.cn), a well-known AI model repository, to support the audio-to-text alignment functionality.
[COMMAND_EXECUTION]: Invokes the ffmpeg system utility via subprocess.run to decode audio data for the ASR (Automatic Speech Recognition) component.
[COMMAND_EXECUTION]: Uses the webbrowser module to automatically launch the user's default browser and display the resulting HTML file upon completion.

blog-narrator