The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes shell commands to manage a persistent playback daemon and to identify the environment's browser version.
Evidence: scripts/player.py utilizes subprocess.Popen to launch player_daemon.py as a background process.
Evidence: scripts/player_daemon.py uses subprocess.run to check the version of detected browser binaries (e.g., google-chrome --version).
[EXTERNAL_DOWNLOADS]: The skill relies on the uv package manager to dynamically fetch and execute third-party dependencies during operation.
Evidence: SKILL.md and README.md instruct the agent to use uv run --with ytmusicapi and uv run --with playwright, which downloads these packages from the standard Python Package Index (PyPI) and installs Playwright browser binaries.
[INDIRECT_PROMPT_INJECTION]: The skill retrieves and processes untrusted content from the YouTube Music API, such as track lyrics, search results, and charts, which are then passed into the agent's context.
Ingestion points: scripts/helper.py fetches search results, playlist metadata, and song lyrics.
Boundary markers: The skill does not implement specific delimiters or 'ignore' instructions for the external text data processed by the agent.
Capability inventory: The skill possesses the capability to write to the local filesystem (auth/state files), perform network operations via ytmusicapi, and execute local scripts via subprocess.
Sanitization: No explicit sanitization or filtering of external text content was identified in the script logic.

yt-music