The Agent Skills Directory

[COMMAND_EXECUTION]: The skill requires the agent to perform several shell-level operations to manage the project's build and deployment lifecycle.\n
It executes cargo update -p ffmpeg-next and bun install to synchronize and manage project dependencies.\n
It runs a local script bun install-toolchain.ts and a build command bun run build-all to compile artifacts for multiple platforms.\n
It utilizes git push and gh pr create for version control and pull request creation to finalize the update.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes data from an external repository, creating a potential surface for indirect prompt injection attacks.\n
Ingestion points: The agent is instructed to fetch a specific commit SHA and read the Cargo.toml file from the remote remotion-dev/rust-ffmpeg repository to verify revisions.\n
Boundary markers: The instructions do not include explicit delimiters or warnings to the agent to disregard instructions that might be embedded within the remote files being retrieved.\n
Capability inventory: The agent has permissions to execute arbitrary shell commands via bun and cargo, and perform network actions via git and gh, which could be triggered by injected instructions.\n
Sanitization: There is no evidence of sanitization or validation of the content of the remote Cargo.toml before it is processed by the agent.\n- [DATA_EXFILTRATION]: The skill contains a hardcoded reference to a specific local user directory in its instructions.\n
The path /Users/jonathanburger/remotion is explicitly documented as a restricted work area, which reveals local environment details including a specific username and directory structure.

update-remotion-rust-ffmpeg