The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The skill instructs the agent to execute commands with elevated privileges using sudo to install system dependencies (apt-get install ffmpeg) and Playwright browser dependencies (bunx playwright install-deps chromium).
[COMMAND_EXECUTION]: The pipeline executes shell commands and drives a PTY by spawning /bin/bash. It also executes ffmpeg and local scripts (capture.ts, compose.mjs) to perform video processing and encoding.
[EXTERNAL_DOWNLOADS]: The skill uses Playwright to download and manage Chromium browser binaries. While Playwright is a well-known service provided by Microsoft, these downloads occur at runtime and are executed by the pipeline.
[INDIRECT_PROMPT_INJECTION]: The skill has a vulnerability surface where it ingests untrusted data from the repository to generate video content.
Ingestion points: The skill reads CHANGELOG.md and content from the examples/ directory to distill headlines and captions.
Boundary markers: No explicit delimiters or instructions to ignore embedded malicious content are present in the processing scripts.
Capability inventory: The skill can execute shell commands (/bin/bash), drive browser instances via Playwright, and run the ffmpeg encoder.
Sanitization: The skill recommends a manual step to confirm headlines with the user before capturing, which provides a human-in-the-loop safety checkpoint.

hunk-launch-video