The Agent Skills Directory

[COMMAND_EXECUTION]: The skill makes extensive use of the Bash tool to execute system commands including ffmpeg for video encoding, yt-dlp for audio extraction, and curl for web scraping. These commands are necessary for the media processing pipeline described.
[EXTERNAL_DOWNLOADS]: The skill downloads audio content from various third-party platforms (Instagram, TikTok, YouTube) and scrapes images from e-commerce sites. These operations are driven by user-provided URLs and are consistent with the skill's intended functionality.
[PROMPT_INJECTION]: The skill possesses a potential surface for indirect prompt injection as it ingests untrusted data from external product pages (such as Shopify JSON or HTML metadata) and processes it into text overlays on the final video.
Ingestion points: Product page URLs (Shopify JSON or HTML) and audio metadata (SKILL.md).
Boundary markers: None identified in the provided instructions.
Capability inventory: Subprocess calls via Bash (ffmpeg, yt-dlp, curl), file-write operations, and WebSearch capability.
Sanitization: No explicit sanitization or validation of the extracted product information (brand name, product name, price) is mentioned before it is passed to the Pillow-based image generation script.

beat-sync-reel