zlei6/OpenMontage
1
0
Fork 0
mirror of https://github.com/calesthio/OpenMontage.git synced 2026-08-05 15:20:40 +08:00
Code Issues Packages Projects Releases Wiki Activity
Files
main
OpenMontage/.agents/skills
History
Chris Brown 85a63471a2 fix: sanitize os.system() shell injection in manimgl scene templates 
os.system(f"manimgl {__file__} ClassName") interpolates the script's own
path into a shell string. These templates are meant to be copied and
renamed per-scene by an agent, so a scene/folder name containing shell
metacharacters is a real injection path, not just malformed input.

Switched to subprocess.run() with an argument list (no shell=True), so
there's nothing left for a shell to interpret regardless of what the
path contains. Same fix applied in both duplicate locations
(.claude/skills and .agents/skills) since the files are identical.

Reviewed scripts/lib/tts.mjs's child_process usage as part of the same
report -- not included in this PR, it already passes args as a real
array with no shell:true anywhere in the call chain, so it isn't
actually exploitable.
2026-07-21 11:26:42 -05:00
..
acestep
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
agents
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
ai-video-gen
Merge remote-tracking branch 'origin/main' into codex/kling-official-phase-1
2026-07-10 14:02:30 +08:00
avatar-video
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
azure-speech-to-text
feat(stt): add Azure AI Speech as an optional cloud speech-to-text provider
2026-07-10 23:30:19 +05:30
beautiful-mermaid
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
bfl-api
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
canvas-procedural-animation
feat(character-animation): add local rigged character pipeline
2026-04-28 08:11:02 -07:00
character-animation-qa
feat(character-animation): add local rigged character pipeline
2026-04-28 08:11:02 -07:00
character-rigging
feat(character-animation): add local rigged character pipeline
2026-04-28 08:11:02 -07:00
comfyui
comfyui: satisfy provider contract review items
2026-06-29 19:09:22 +01:00
create-video
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
d3-viz
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
dashscope
dashscope: add Layer 3 skill documentation
2026-06-30 14:35:34 +08:00
doubao-tts
feat(tts): add Doubao Speech provider
2026-05-04 21:40:17 +08:00
elevenlabs
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
faceswap
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
ffmpeg
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
flux-best-practices
docs: scope orphaned skill-level AGENTS.md as supplementary references
2026-06-26 13:18:35 +05:30
framer-motion
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
gemini-omni
feat(video): add Gemini Omni Flash provider with conversational editing
2026-07-08 11:00:57 -07:00
grok-media
Add Grok media providers and improve selector routing
2026-04-05 15:31:37 -07:00
gsap
docs: de-stale gsap/README.md and mark it a non-loadable nav map
2026-06-26 13:18:35 +05:30
gsap-core
skills: adopt GSAP Layer 3 + Layer 2 animation-runtime routing
2026-04-16 20:07:00 -07:00
gsap-frameworks
skills: adopt GSAP Layer 3 + Layer 2 animation-runtime routing
2026-04-16 20:07:00 -07:00
gsap-performance
skills: adopt GSAP Layer 3 + Layer 2 animation-runtime routing
2026-04-16 20:07:00 -07:00
gsap-plugins
skills: adopt GSAP Layer 3 + Layer 2 animation-runtime routing
2026-04-16 20:07:00 -07:00
gsap-react
skills: adopt GSAP Layer 3 + Layer 2 animation-runtime routing
2026-04-16 20:07:00 -07:00
gsap-scrolltrigger
skills: adopt GSAP Layer 3 + Layer 2 animation-runtime routing
2026-04-16 20:07:00 -07:00
gsap-timeline
skills: adopt GSAP Layer 3 + Layer 2 animation-runtime routing
2026-04-16 20:07:00 -07:00
gsap-utils
skills: adopt GSAP Layer 3 + Layer 2 animation-runtime routing
2026-04-16 20:07:00 -07:00
heygen
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
hyperframes
chore(deps,skills): bump Remotion 4.0.441→4.0.484; re-vendor HyperFrames skills at v0.7.17
2026-06-27 14:00:00 -07:00
hyperframes-animation
chore(deps,skills): bump Remotion 4.0.441→4.0.484; re-vendor HyperFrames skills at v0.7.17
2026-06-27 14:00:00 -07:00
hyperframes-cli
chore(deps,skills): bump Remotion 4.0.441→4.0.484; re-vendor HyperFrames skills at v0.7.17
2026-06-27 14:00:00 -07:00
hyperframes-core
chore(deps,skills): bump Remotion 4.0.441→4.0.484; re-vendor HyperFrames skills at v0.7.17
2026-06-27 14:00:00 -07:00
hyperframes-creative
chore(deps,skills): bump Remotion 4.0.441→4.0.484; re-vendor HyperFrames skills at v0.7.17
2026-06-27 14:00:00 -07:00
hyperframes-media
Add expressive TTS governance
2026-06-29 12:16:07 -07:00
hyperframes-registry
chore(deps,skills): bump Remotion 4.0.441→4.0.484; re-vendor HyperFrames skills at v0.7.17
2026-06-27 14:00:00 -07:00
kling-official
fix: harden Kling integration verification
2026-07-10 20:53:45 +08:00
lottie-bodymovin
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
ltx2
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
lyria
feat(music): add Google Lyria generation skill
2026-07-18 16:47:35 -07:00
manim-composer
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
manimce-best-practices
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
manimgl-best-practices
fix: sanitize os.system() shell injection in manimgl scene templates
2026-07-21 11:26:42 -05:00
media-use
chore(deps,skills): bump Remotion 4.0.441→4.0.484; re-vendor HyperFrames skills at v0.7.17
2026-06-27 14:00:00 -07:00
motion-graphics
chore(deps,skills): bump Remotion 4.0.441→4.0.484; re-vendor HyperFrames skills at v0.7.17
2026-06-27 14:00:00 -07:00
music
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
music-to-video
chore(deps,skills): bump Remotion 4.0.441→4.0.484; re-vendor HyperFrames skills at v0.7.17
2026-06-27 14:00:00 -07:00
playwright-recording
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
pose-library-design
feat(character-animation): add local rigged character pipeline
2026-04-28 08:11:02 -07:00
remotion
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
remotion-best-practices
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
remotion-to-hyperframes
chore(deps,skills): bump Remotion 4.0.441→4.0.484; re-vendor HyperFrames skills at v0.7.17
2026-06-27 14:00:00 -07:00
seedance-2-0
feat(remotion): upgrade cinematic TitleCard + add new scene components
2026-04-23 23:30:23 -07:00
setup-api-key
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
sound-effects
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
speech-to-text
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
svg-character-animation
feat(character-animation): add local rigged character pipeline
2026-04-28 08:11:02 -07:00
synthetic-screen-recording
fix: resolve skill loading warnings and correct video-toolkit naming
2026-06-25 19:00:47 +05:30
tailwind-design-system
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
text-to-speech
Add expressive TTS governance
2026-06-29 12:16:07 -07:00
threejs-animation
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
threejs-fundamentals
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
threejs-geometry
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
threejs-interaction
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
threejs-lighting
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
threejs-loaders
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
threejs-materials
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
threejs-postprocessing
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
threejs-shaders
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
threejs-textures
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
vercel-composition-patterns
docs: scope orphaned skill-level AGENTS.md as supplementary references
2026-06-26 13:18:35 +05:30
vercel-react-best-practices
docs: scope orphaned skill-level AGENTS.md as supplementary references
2026-06-26 13:18:35 +05:30
video-download
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
video-edit
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
video-toolkit
fix: resolve skill loading warnings and correct video-toolkit naming
2026-06-25 19:00:47 +05:30
video-translate
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
video-understand
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
visual-style
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
web-design-guidelines
Initial release — OpenMontage: the first open-source agentic video production system
2026-03-29 08:25:17 -07:00
website-to-video
chore(deps,skills): bump Remotion 4.0.441→4.0.484; re-vendor HyperFrames skills at v0.7.17
2026-06-27 14:00:00 -07:00