The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill clones a repository from an unverified source at https://github.com/sxhzju/ruler-progress-animator.git during execution.
[REMOTE_CODE_EXECUTION]: After cloning the repository, the skill runs npm install and npm run remotion:render. This pattern allows any code or post-install scripts within the third-party repository to execute on the local system with the same privileges as the agent.
[COMMAND_EXECUTION]: The script scripts/render_ruler_progress.sh takes user-provided arguments (workspace_dir and output_path) and uses them in shell commands like mkdir, cd, and as environment variables. While the script uses double-quotes to mitigate basic word-splitting, the execution of arbitrary code from the repository remains the primary concern.
[REMOTE_CODE_EXECUTION]: Uses npx remotion render, which downloads and executes the remotion package at runtime if not already present.

ruler-progress-render