The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external video and audio files to analyze style, pacing, and dialogue. The use of automated transcription (Whisper) creates a surface where malicious instructions embedded in audio or video metadata could influence the resulting prompt generation or template creation.
Ingestion points: Video file paths and transcribed audio content processed in clone-ad/SKILL.md and analyze-video/SKILL.md.
Boundary markers: Partially mitigated by a 'MANDATORY dialogue confirmation gate' which requires explicit user review and approval of the generated script before API submission.
Capability inventory: The skill possesses network capabilities (Arcads API) and local file write/execution capabilities.
Sanitization: No technical sanitization of transcribed text is performed; reliance is placed entirely on human-in-the-loop validation.
[COMMAND_EXECUTION]: The skill frequently invokes shell commands and local scripts to perform media processing tasks.
Evidence: Invokes ffmpeg, ffprobe, and npx hyperframes for frame extraction, video stitching, and captioning across multiple workflows.
Evidence: Executes a local bash script (prompting/analyze-video/scripts/extract-frames.sh) to automate the decomposition of video files.
Evidence: Uses OS-specific shell commands (e.g., open, xdg-open, explorer) to automatically open output directories on the user's machine.
[EXTERNAL_DOWNLOADS]: The skill relies on several external tools and libraries that must be fetched or installed at runtime.
Evidence: Instructs the user to install ffmpeg via Homebrew and the openai-whisper Python package.
Evidence: Utilizes npx hyperframes to download and execute the hyperframes package for transcribing and rendering video captions.
[DATA_EXPOSURE]: The skill manages sensitive credentials and logs interaction history.
Evidence: Instructs users to manually populate an ARCADS_API_KEY into a local .env file.
Evidence: Appends detailed generation metadata, including asset IDs, credit charges, and prompt statistics, to a local log file at logs/arcads-api.jsonl.

arcads-external-api