The Agent Skills Directory

[COMMAND_EXECUTION]: The scripts scripts/subfix.py and scripts/dub_multi.py utilize subprocess.run to execute external binaries including ffmpeg, ffprobe, and the bl (Bailian) CLI for video processing and model interaction.
[CREDENTIALS_UNSAFE]: The scripts/dub_multi.py script contains logic to read the api_key directly from ~/.bailian/config.json. While intended for service authentication, accessing credentials from fixed filesystem paths is a sensitive operation.
[PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection via the media content it processes.
Ingestion points: scripts/subfix.py (ingests video frames via bl vision describe and ASR text via bl text chat).
Boundary markers: Absent; the instructions for the LLM do not use strict delimiters to separate instructions from the data to be corrected.
Capability inventory: subprocess.run calls for media manipulation and CLI interactions in subfix.py and dub_multi.py.
Sanitization: Absent; the output from the models is directly used to generate subtitle files without secondary validation.
[DATA_EXFILTRATION]: Audio tracks and video frames are extracted locally and uploaded to Alibaba Cloud's DashScope/Bailian services for AI processing. This is a functional requirement but involves transmitting local data to a third-party cloud provider.
[EXTERNAL_DOWNLOADS]: The skill depends on the installation of the bl CLI tool from Alibaba Cloud and the flask Python package for its preview functionality.
[NETWORK_EXPOSURE]: The scripts/preview_editor.py script starts a Flask server binding to 0.0.0.0. This makes the local video preview and subtitle editor accessible to any device on the same local network without authentication.

qwen-subtitle