The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill provides instructions to download the Tesseract CLI binary from the official vendor repository (github.com/mirage-hq/tesseract). This is the intended primary purpose of the installation guide and includes mandatory security steps like SHA-256 checksum verification before execution.
[COMMAND_EXECUTION]: The skill uses local Python scripts (tesseract_media.py, tesseract_sound.py) that wrap subprocess calls to well-known media utilities like FFmpeg and ffprobe. These calls are used strictly for media metadata inspection and procedural audio synthesis as part of the creative workflow.
[DATA_EXFILTRATION]: The documentation explicitly mentions that the Tesseract CLI may collect basic usage telemetry (command name, version, OS) to the vendor's domain (mirage.app). The instructions include clear commands to disable this feature (tsrct telemetry disable) and strictly forbid the agent from enabling it without user consent.
[DYNAMIC_EXECUTION]: The skill facilitates the authoring of custom shaders (WGSL) and JavaScript-based animation envelopes. These are standard features of the Tesseract rendering engine designed to provide procedural control to users, and they execute within the Tesseract environment.
[INDIRECT_PROMPT_INJECTION]: As a media editing tool, the skill processes external footage and fonts. While this presents an attack surface for malformed files, the skill relies on standard system libraries and CLI tools for processing, and the instructions emphasize using trusted/supplied assets.

tesseract-motion