The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill includes scripts (docs-search.mjs, graphql-schemata.mjs, openApi-schemata.mjs) that fetch documentation and schema data from official commercetools domains (docs.commercetools.com). These are used for grounding the agent's context and are standard for developer tooling.
[COMMAND_EXECUTION]: The SKILL.md file provides commands to run the included utility scripts via node. These scripts are part of the skill's distribution and serve the purpose of gathering technical context.
[CREDENTIALS_UNSAFE]: The documentation (sdk-setup.md) correctly advises against committing secrets to version control, recommending the use of .env files and adding them to .gitignore. It also warns against exposing secrets to the frontend by avoiding specific prefixing (e.g., NEXT_PUBLIC_).
[DATA_EXPOSURE]: The scripts send instrumentation headers (e.g., X-Model, X-Client-Type) to the commercetools documentation API to optimize search results. This is limited to metadata about the agent environment and does not involve user-sensitive files or credentials.

commercetools-platform