The Agent Skills Directory

[COMMAND_EXECUTION]: The script _auth.py utilizes subprocess.run to invoke a local authentication helper script (open_login_page.py). This is a documented part of the credential management workflow used to open a login page in the browser.
[DYNAMIC_EXECUTION]: The script _task_api.py uses __import__("os") to retrieve environment variables. This dynamic access is used for configuration purposes (retrieving API base URLs) and does not involve executing untrusted code or loading external modules from computed paths.
[CREDENTIALS_UNSAFE]: The skill manages sensitive API credentials, including app_id, secret_key, and access_token, by storing them in a local credentials.json file. This behavior is explicitly declared in the manifest and documentation as the intended method for session persistence and API access.

chanjing-ai-creation