The Agent Skills Directory

[COMMAND_EXECUTION]: The skill invokes ffmpeg and mkdir within the scripts/frame.sh script. It correctly utilizes shell quoting for all variable expansions, effectively mitigating standard shell command injection risks.
[PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8) due to the handling of external parameters. (1) Ingestion points: The script accepts user-influenced parameters such as --time and --index via command-line arguments. (2) Boundary markers: Absent; the script does not verify the structure or content of the provided arguments before use. (3) Capability inventory: The script performs system command execution using ffmpeg. (4) Sanitization: There is no sanitization or validation logic for the --index or --time inputs, which are interpolated directly into the ffmpeg filter string. This could allow an attacker to inject additional ffmpeg filters or options by providing specially crafted strings.

video-frames