The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses subprocess.Popen and subprocess.run to call ffmpeg and ffprobe. These calls are essential for video processing and are implemented securely using argument lists rather than shell strings, preventing command injection.
[EXTERNAL_DOWNLOADS]: The skill relies on well-known and trusted libraries such as playwright (Microsoft) and pillow. Instructions for installing these and the associated browser binaries follow official documentation and standard development practices.
[INDIRECT_PROMPT_INJECTION]: The tool navigates to external URLs to perform recordings. This constitutes an ingestion point for untrusted data; however, the browser environment provides isolation, and the skill does not pass content from the visited pages into sensitive system commands or environment variables.
[DYNAMIC_EXECUTION]: The skill injects a JavaScript utility into the browser to manage a virtual clock and synchronize animations. This is a local execution within the controlled browser context and is necessary to ensure 60 fps recording quality regardless of render speed.
[SAFE]: No malicious obfuscation, persistence, or data exfiltration patterns were identified. The scripts perform as described in the documentation.

frame-capture