The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes shell commands and subprocesses to manage its installation and provide its primary functionality. This includes using pip for dependency management and calling specialized CLI downloaders like qobuz-dl and tiddl. Evidence is found in scripts/setup_env.py, scripts/lib/platform.py, and scripts/platform_download.py.
[EXTERNAL_DOWNLOADS]: The skill downloads and installs several third-party Python libraries from official registries and fetches music metadata and audio content from well-known service providers (Spotify, Last.fm, Qobuz, and TIDAL).
[DYNAMIC_EXECUTION]: The skill employs dynamic execution patterns for its operational workflow, such as generating localized helper scripts (run.sh and run.bat) during setup and spawning background worker processes (scripts/_download_worker.py) to handle asynchronous download tasks without blocking the main agent session.
[INDIRECT_PROMPT_INJECTION]: The skill retrieves metadata from external music APIs (Spotify and Last.fm) and presents it to the agent. This introduces an inherent surface for indirect prompt injection via untrusted external data (e.g., malicious track titles), though the skill follows standard parsing practices and the risk is considered low for its intended discovery use-case.

hifi-download