The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/animate.py executes ffmpeg using subprocess.run. The implementation is secure as it passes the command as a list rather than a shell string, which prevents shell injection. Additionally, potential injection vectors into the ffmpeg filter string are mitigated by the use of argparse, which enforces int and float types for parameters like width, height, and zoom rate before they are interpolated into the filter configuration.
[EXTERNAL_DOWNLOADS]: No remote code or packages are downloaded during execution. The skill includes logic to locate the ffmpeg binary in standard local installation paths (e.g., Winget, Scoop, or Chocolatey directories on Windows) if it is not already present on the system PATH, which is a benign environment-discovery behavior.
[DATA_EXPOSURE]: The skill performs standard file system operations required for its task, specifically reading an input image file and writing an output MP4 file to a user-specified path. No sensitive file access or network exfiltration patterns were detected.

video-still-animator