The Agent Skills Directory

[COMMAND_EXECUTION]: The script ingest.py executes the yt-dlp binary using the subprocess.run method. It passes arguments as a list rather than a shell string, which is a secure practice that mitigates shell injection risks.
[EXTERNAL_DOWNLOADS]: The skill connects to YouTube to download metadata and subtitle files. This communication is handled by yt-dlp, a standard tool for this purpose, and targets a well-known service.
[PROMPT_INJECTION]: The skill ingests untrusted content from YouTube transcripts which could potentially contain adversarial instructions. The script implements boundary markers using YAML frontmatter and performs sanitization by cleaning VTT timing markers and slugifying metadata to prevent path traversal when writing files.

ingest-youtube