The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/carve.mjs uses execFileSync to execute ffmpeg on the local system for the purpose of decoding audio files into raw PCM data for analysis.
[DYNAMIC_EXECUTION]: The script scripts/carve.mjs implements dynamic module loading using import() with computed paths. It resolves the @hyperframes/core package relative to the composition's project directory and dynamically imports its sub-modules (e.g., audio-carve, audio-fx) to perform the core audio processing logic.
[INDIRECT_PROMPT_INJECTION]: The skill processes user-controlled data in the form of HTML composition files and media files, which serves as an attack surface for indirect prompt injection.
Ingestion points: scripts/carve.mjs reads the content of HTML files and uses ffmpeg to process external audio assets referenced in those files.
Boundary markers: There are no explicit boundary markers or instructions to ignore embedded content within the processed HTML or audio data.
Capability inventory: The skill possesses capabilities for file system reading (readFileSync), writing (writeFileSync), and subprocess execution (execFileSync).
Sanitization: The script performs basic attribute escaping and unescaping when reading from or writing to HTML attributes, but it does not perform deep validation of the audio data or HTML structure against malicious injections.

hyperframes-audio