The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the agent to automatically install ffmpeg using system package managers (apt-get, brew, winget) if not found. This involves executing system-level commands that typically require administrative privileges.\n- [COMMAND_EXECUTION]: The script scripts/import-media.mjs executes ffmpeg and ffprobe using spawnSync. The binary paths can be overridden via command-line flags or environment variables, which could be exploited to run unauthorized programs if the environment is manipulated.\n- [DATA_EXFILTRATION]: The skill reads local video and image files and uploads them to a remote server (https://pireel.com). While this is intended functionality for the Pireel service, it constitutes a data exfiltration pattern where local data is transferred to a cloud environment.\n- [EXTERNAL_DOWNLOADS]: The skill triggers the download and installation of external software (ffmpeg) from public package repositories during execution.\n- [PROMPT_INJECTION]: The instructions explicitly direct the agent to run the helper script 'OUT of sandbox' and to install dependencies without asking the user for confirmation, which attempts to override default security boundaries and user oversight.

asset-import