The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes a local Python script (scripts/yinchao_music.py) to handle its core functionality. This script is responsible for interacting with the platform's API and managing local file uploads.
[EXTERNAL_DOWNLOADS]: The skill performs network operations to the vendor's API endpoint at open.yinchaoyongxian.com to submit music generation tasks and check task status. It also supports uploading local audio files to the platform for reference-based music creation.
[INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it processes user-provided lyrics and creative prompts which are subsequently sent to the remote music generation service.
Ingestion points: User-supplied prompts and lyrics passed via the --prompt and --lyric arguments in SKILL.md and referenced files.
Boundary markers: The skill does not explicitly use delimiters or guardrail instructions to isolate user input from the rest of the generation flow.
Capability inventory: The skill possesses network communication capabilities and file reading permissions (for audio uploads) through the provided Python script.
Sanitization: The Python script implements basic input validation, including character length limits (1,000 for prompts, 3,000 for lyrics) and verification of audio file formats and sizes.

yinchao-ai-music