The Agent Skills Directory

[COMMAND_EXECUTION]: The skill makes extensive use of the Bash tool to execute system commands including file operations, network requests via yt-dlp, and iOS device interaction via pymobiledevice3. While these are necessary for the skill's functionality, they represent a broad capability surface.
[EXTERNAL_DOWNLOADS]: The skill instructs the user to install external binary dependencies (yt-dlp, ffmpeg, exiftool) via Homebrew and utilizes uvx to fetch and run the pymobiledevice3 package. These are well-known tools from established sources and are standard for media-related automation tasks.
[DYNAMIC_EXECUTION]: The skill uses shell heredocs (python3 << 'PYEOF') to generate and execute Python scripts at runtime. This is specifically used to interact with the pymobiledevice3 library. The logic is transparent and static within the skill instructions, but runtime script generation is a pattern typically monitored for complexity.
[INDIRECT_PROMPT_INJECTION]: The skill contains an attack surface for indirect prompt injection as it processes untrusted metadata (titles, channel names) from YouTube videos.
Ingestion points: Data enters the agent context through yt-dlp --dump-json in Phase 1 of SKILL.md.
Boundary markers: Explicit delimiters for the external data are not used in the extraction script.
Capability inventory: The skill can perform network operations (yt-dlp), write to the filesystem (exiftool), and write to a connected iOS device (pymobiledevice3).
Sanitization: The skill mitigates this risk by requiring the user to confirm or customize the metadata via AskUserQuestion before it is applied to files, and it employs filename truncation to prevent filesystem exploits.

youtube-to-bookplayer