The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The installation instructions in SKILL.md and references/operations.md require the use of sudo for system package management (sudo apt update && sudo apt install -y ffmpeg).
[COMMAND_EXECUTION]: The skill facilitates the direct execution of several command-line tools, including ffmpeg, ffprobe, printf, and rm, to perform video processing tasks.
[EXTERNAL_DOWNLOADS]: The skill guides the user to download and install ffmpeg from official package repositories (Apple Homebrew and Ubuntu APT).
[INDIRECT_PROMPT_INJECTION]: The skill's commands ingest file paths and names which could potentially be sourced from untrusted external data. While the skill provides templates, the lack of explicit sanitization in the logic poses a surface for potential command injection if the agent interpolates malicious filenames into the shell commands.
Ingestion points: Input video/audio filenames and temporary file paths (e.g., list.txt, palette.png) used throughout the command templates in SKILL.md and references/operations.md.
Boundary markers: No delimiters or instructions are provided to the agent to treat filenames as literal data only.
Capability inventory: The skill utilizes subprocess execution for complex video editing, file creation/concatenation via printf, and file deletion via rm.
Sanitization: There is no evidence of filename validation or escaping mechanisms to prevent shell metacharacters from being interpreted.

video-edit