The Agent Skills Directory

[COMMAND_EXECUTION]: Several scripts in the skill execute shell commands using subprocess.run to perform media processing tasks. For instance, scripts/video_to_spritesheet.py and scripts/generate_walk_video.py utilize FFmpeg for video manipulation, while scripts/image_to_ascii.py calls the jp2a utility. These executions are consistent with the skill's documented purpose and do not utilize shell-based execution, which minimizes injection risks.
[EXTERNAL_DOWNLOADS]: The skill relies on well-known and established third-party dependencies and system tools, such as Pillow, rembg, and ImageMagick. Installation instructions provided in the documentation refer users to official package managers like pip and brew. No unauthorized or suspicious remote code downloads are performed.
[SAFE]: A thorough analysis across the 10 threat categories revealed no evidence of prompt injection, data exfiltration, persistence mechanisms, or obfuscation. The skill's implementation follows standard practices for media asset generation.

sprite-forge