The Agent Skills Directory

[COMMAND_EXECUTION]: Several automation scripts included with the skill execute shell commands to perform system tasks.
workbench/scripts/open.mjs uses child_process.spawn to execute npm install and npm run dev (Vite server) during the project setup phase.
assets/scripts/smoke-render-demos.py uses subprocess.run to call the remotion CLI for automated smoke testing and rendering.
jianying-export/smoke_test.py executes pip install pyJianYingDraft to verify the environment.
jianying-export/mac_draft.py uses os.system for file operations and subprocess.run to check the system configuration on macOS.
jianying-export/windows_draft.py uses subprocess.run to call reg.exe for querying the Windows registry to locate installation paths.
[EXTERNAL_DOWNLOADS]: The skill initiates downloads of third-party software and libraries during its normal operation.
The JianYing export module automatically installs pyJianYingDraft from PyPI if it is not present.
The Motion Workbench automatically installs its Node.js dependencies via npm install when first opened.
The capture script assets/scripts/capture-template.mjs utilizes Puppeteer, which may download a specific version of Chromium for headless browser operations.
[DYNAMIC_EXECUTION]: The skill contains logic that generates and then executes script files as part of its testing and indexing pipeline.
assets/scripts/smoke-render-demos.py dynamically generates template/src/smoke-root.tsx by scanning the demos/ directory and then executes the resulting code via Remotion.
workbench/scripts/gen-index.mjs generates metadata and index files (demo-index.ts, demoMeta.ts) at runtime to populate the Motion Workbench library.
[INDIRECT_PROMPT_INJECTION]: The skill possesses a significant attack surface due to its complex data processing pipeline.
Ingestion points: The agent reads local shot recipe cards (references/shots/), UI layout JSON files, and user-provided copy/branding information.
Boundary markers: Missing explicit delimiters to separate user-provided branding text from the agent's internal video generation instructions.
Capability inventory: The skill allows the agent to write files, execute shell commands, and run local web servers.
Sanitization: There is no visible sanitization of the text content before it is interpolated into the Remotion TSX templates, which could potentially lead to unexpected behavior if processed by downstream automated agents.

video-shotcraft