The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/analyze-beatgrid.py executes the ffmpeg binary using subprocess.run to decode audio files. The implementation uses a list of arguments rather than a shell string, which mitigates the risk of shell injection attacks.
[EXTERNAL_DOWNLOADS]: The skill uses the npx hyperframes utility and instructs the agent to install Python dependencies including librosa, numpy, and soundfile. It also references the GreenSock (GSAP) and Three.js libraries from cdn.jsdelivr.net. These are established tools and services appropriate for the skill's purpose.
[DYNAMIC_EXECUTION]: The skill generates HTML composition files for video frames through its assemble-index.mjs script and sub-agent instructions. This dynamic generation of web-based motion graphics is a core functional requirement of the video assembly process.
[SAFE]: The skill includes a dedicated cleanSvg sanitization function in its templates (e.g., in logo-split-lockup-pulse/index.html) to filter out potentially malicious attributes and elements from user-supplied vector graphics, effectively preventing DOM-based XSS. No indicators of data exfiltration, credential harvesting, or obfuscation were found.

music-to-video