The Agent Skills Directory

[SAFE]: The skill interacts with official ByteDance Volcengine API endpoints (open.volcengineapi.com) and storage services (TOS). All network operations and authentication mechanisms are consistent with the intended purpose of managing AgentKit resources.
[SAFE]: The skill requires environment variables (VOLCENGINE_ACCESS_KEY, VOLCENGINE_SECRET_KEY) for authentication but does not hardcode them or exfiltrate them to unauthorized third-party domains. It follows standard security practices by loading credentials from the environment or a designated configuration file (/root/.skills_env).
[SAFE]: File operations, such as extracting downloaded skills from ZIP archives, include path validation (validate_zip_member) to prevent directory traversal attacks (ZipSlip).

skills-management