The Agent Skills Directory

[COMMAND_EXECUTION]: The script executes established image processing utilities such as sips, cwebp, and ImageMagick's convert using child_process.spawn. This approach avoids shell invocation, effectively preventing command injection vulnerabilities by passing arguments as an array.
[EXTERNAL_DOWNLOADS]: The skill uses npx to execute the local TypeScript file, which may download the bun runtime or the sharp library if they are not already present on the system. These are well-known, trusted, and standard tools in the developer ecosystem.
[SAFE]: File system operations, including renaming and moving compressed files, are performed using standard Node.js/Bun APIs and are scoped appropriately to the user-provided input and output paths.

baoyu-compress-image