The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The scripts scripts/render.py and scripts/to_strudel.py contain logic in the ensure_deps function to dynamically install Python packages (pretty_midi, numpy, soundfile) using pip install if they are not already present in the environment.
[COMMAND_EXECUTION]: The skill executes external system commands using subprocess.run and subprocess.check_call to perform audio rendering tasks via fluidsynth and ffmpeg, and to manage package installations.
[EXTERNAL_DOWNLOADS]: The documentation in soundfonts/README.md describes an automatic download feature for SoundFont files from external sources such as archive.org and supports user-provided URLs for downloading binary assets via command-line arguments.
[INDIRECT_PROMPT_INJECTION]: The skill ingests and parses MIDI and MusicXML files. MusicXML is an XML-based format processed by the music21 library, which could be a vector for injection attacks if the underlying parser is not configured with security guardrails against malicious XML structures. This finding is based on ingestion points in load_input across both scripts, the absence of explicit boundary markers for external data, the extensive capability inventory including system commands and file writing, and the lack of explicit sanitization for music file content.
[DYNAMIC_EXECUTION]: The ensure_deps function in both Python scripts utilizes the __import__ function to dynamically check for and load modules based on string names at runtime.

midi-synth