The Agent Skills Directory

[PERSISTENCE]: The scripts/onboard.py script modifies the user's global agent configuration file at ~/.codex/AGENTS.md. This is a persistent modification that alters the behavior of the AI agent across different sessions by injecting instructions to prioritize this skill for vision tasks.
[DYNAMIC_EXECUTION]: The skill performs runtime compilation of Swift source code. In scripts/parse_media.py, the macos_ocr function uses swiftc to compile scripts/ocr_macos.swift into a binary located in a .runtime directory. While this is used to optimize OCR performance, runtime compilation of distributed source code is a significant dynamic execution pattern. Additionally, it executes JavaScript via osascript for alternative OCR paths.
[COMMAND_EXECUTION]: The skill extensively utilizes system-level commands via subprocesses to handle media processing and OCR. Affected tools include ffmpeg, ffprobe, tesseract, magick (ImageMagick), sips, and powershell. These commands interact with user-provided file paths and URLs.
[INDIRECT_PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection by ingesting untrusted media content (images and videos) from arbitrary URLs or local paths.
Ingestion points: resolve_media in scripts/parse_media.py (URL and path inputs).
Boundary markers: Absent; the extracted OCR text and multimodal model descriptions are appended directly to the output Markdown without delimiters or instructions for the agent to ignore embedded commands.
Capability inventory: Subprocess execution of media tools, file system writes to output directories, and network access to multimodal providers.
Sanitization: None; the skill does not filter or sanitize text extracted from media before returning it to the agent.
[EXTERNAL_DOWNLOADS]: The scripts/parse_media.py script fetches media files from user-provided URLs using urllib.request. Although it implements a size limit of 512MB, it allows the skill to ingest data from any external network source, which is then processed by the agent.

see