The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill recommends downloading background music from Pixabay Music. This is a well-known and reputable service for royalty-free assets.
[COMMAND_EXECUTION]: The skill uses shell commands to facilitate the development and rendering of videos. It specifically uses pnpm run dev, bun run remotion, and bunx remotion render to execute the Remotion framework and process the video compositions.
[INDIRECT_PROMPT_INJECTION]: The skill has a vulnerability surface where untrusted data provided by the user is interpolated into generated source code and used for file system operations.
Ingestion points: User-provided strings such as the product name, tagline, feature titles, descriptions, and CTA URLs are collected via AskUserQuestion and the public/ folder.
Boundary markers: There are no boundary markers or instructions to treat user-provided text as untrusted data when generating the [ProductName]Intro.tsx file.
Capability inventory: The skill uses the Write tool to create executable .tsx files and the Bash tool to run the Remotion engine on those files.
Sanitization: The skill lacks instructions for the agent to sanitize or escape user-provided strings before they are embedded into the React/Remotion code templates, creating a potential path for code injection if the generated code is executed.

modern-short-video