The Agent Skills Directory

Indirect Prompt Injection Surface: The skill describes patterns for fetching data from external sources during the video rendering process. Specifically, the 'calculateMetadata' function is shown fetching JSON from a user-provided URL, and the Lottie integration fetches animation data from 'assets4.lottiefiles.com'. These represent ingestion points for external content. 1. Ingestion points: calculate-metadata.md (via fetch), lottie.md (via fetch), and various components accepting remote source URLs. 2. Boundary markers: None explicitly shown to isolate external data from instructions. 3. Capability inventory: The skill patterns include file system writes, network requests, and CLI tool usage. 4. Sanitization: The examples do not demonstrate sanitization of external data before use.
External Resource and Package Management: The skill recommends installing several packages using 'npx remotion add' and standard package managers. It also mentions loading the CesiumJS library from a CDN at runtime and references external asset repositories on GitHub. While these are standard development practices, they involve the introduction of external code and resources into the project environment.
Command Execution and Scripting: The documentation provides various CLI commands for rendering and previewing videos, such as 'npx remotion studio' and 'npx remotion ffmpeg'. It also includes patterns for creating and running local scripts for tasks like generating voiceovers or preparing geographic paths, which involves executing code and writing to the local file system.
Sensitive Data Handling: The skill appropriately suggests using environment variables for managing API keys for services like MapTiler, Google Maps, Mapbox, and ElevenLabs, which is a recommended practice to avoid hardcoding credentials.

remotion-markup