The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill installs a Python package directly from a GitHub repository using pip install "narrator-ai-cli @ git+https://github.com/NarratorAI-Studio/narrator-ai-cli.git". This allows for the download and execution of arbitrary code from an external, unverified source during the installation phase.\n- [EXTERNAL_DOWNLOADS]: The skill uses curl to download video files from URLs provided by the API (VIDEO_URL). These URLs are generated at runtime and point to external servers.\n- [COMMAND_EXECUTION]: The skill relies on subprocess.run to call the narrator-ai-cli tool with various arguments, including file IDs and movie IDs, which may be influenced by external input.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data, specifically movie files and clips.json metadata, to generate narration scripts.\n
Ingestion points: Movie files and JSON clip metadata uploaded via narrator-ai-cli file upload.\n
Boundary markers: None identified; the skill directly passes file references to the CLI for processing.\n
Capability inventory: The skill can execute shell commands via subprocess.run, perform network operations via curl and httpx, and write files to the local system.\n
Sanitization: No evidence of input validation or sanitization for the content of the uploaded movies or JSON metadata before they are used to influence AI script generation.

narrator-ai-cli-skill