The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes local bash and Node.js scripts (export-video.sh and capture-frames.mjs) to orchestrate the video rendering process. This includes running ffmpeg for audio synthesis and video assembly, and playwright for frame capture.
[EXTERNAL_DOWNLOADS]: During the export process, the skill downloads the Playwright library and the Chromium browser from the official NPM registry and Microsoft's distribution servers. These are well-known and trusted sources for development tools.
[DYNAMIC_EXECUTION]: The skill dynamically generates an HTML file containing JavaScript code (window.renderFrame) that defines the video's animation logic. This code is then executed within a headless browser to render the video frame-by-frame, which is the core intended functionality of the tool.
[INDIRECT_PROMPT_INJECTION]: The skill accepts user-provided input for product_name and product_description and interpolates them into the generated HTML and JavaScript. While this creates an injection surface, the risk is mitigated as the content is rendered locally for the user's own video generation and does not involve exfiltration to third-party servers.

vid-product-launch