The Agent Skills Directory

[SAFE]: The skill implements a standalone motion processing pipeline for skeletal animation data. Analysis of the instructions and provided commands shows no evidence of malicious intent or security vulnerabilities.
[EXTERNAL_DOWNLOADS]: The environment setup instructions use standard package management tools to install well-known libraries such as numpy, scipy, pygltflib, and Pillow. These are standard dependencies for the stated purpose of motion data processing.
[DYNAMIC_EXECUTION]: The generate-move-ts.py script utilizes importlib to load the local motion-pipeline.py script as a module. This is a routine method for modular code integration and does not involve executing untrusted remote code.
[INDIRECT_PROMPT_INJECTION]: The skill ingests external BVH (Biovision Hierarchy) files for processing. Although this constitutes an attack surface for indirect prompt injection, the specific domain of skeletal mocap data and the structured parsing approach significantly reduce the likelihood of successful injection attacks.

motion-pipeline