The Agent Skills Directory

[COMMAND_EXECUTION]: The skill invokes the external utility gifsicle to handle advanced GIF compression. The implementation uses subprocess.run with an argument list rather than a shell string, which is the recommended security practice to prevent command injection vulnerabilities.
[INDIRECT_PROMPT_INJECTION]: The skill processes external data as part of its core functionality. 1. Ingestion points: The source argument in make_gif.py accepts directory paths or filenames containing image data. 2. Boundary markers: The skill does not implement specific delimiter-based boundary markers for path inputs, relying instead on standard shell argument parsing. 3. Capability inventory: The skill has the capability to read files from the local filesystem (images), write files (GIF output), and execute the gifsicle subprocess for compression. 4. Sanitization: Input paths are processed using Python's glob and os.path modules, which treat inputs as literal strings. The subprocess call is sanitized by passing arguments as a list, preventing shell interpolation.
[EXTERNAL_DOWNLOADS]: The skill's entry point script (run.sh) automatically configures a local Python virtual environment and installs the Pillow library from the official Python Package Index (PyPI). This behavior is consistent with standard environment management and does not involve untrusted or unknown sources.

gif-maker