The Agent Skills Directory

[COMMAND_EXECUTION]: The script capture_frames.py uses subprocess.run to invoke external utilities including yt-dlp, ffmpeg, and ffprobe. These commands are executed using argument lists rather than raw strings, which is a standard and secure practice for video processing tools.
[EXTERNAL_DOWNLOADS]: The skill is designed to fetch video metadata, stream URLs, and transcript data from YouTube's infrastructure. These operations are essential to the skill's stated purpose of transcript and frame extraction.
[INDIRECT_PROMPT_INJECTION]: As the skill processes externally sourced transcript data, there is a theoretical surface for indirect prompt injection if an attacker were to embed malicious instructions in video captions. This is a common characteristic of data-processing skills and is mitigated by the fact that the output is saved to text files for user review.
[SAFE]: The code follows best practices for input validation, such as using regular expressions to sanitize YouTube Video IDs before using them in shell commands or file paths.

youtube-transcript