The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill documents an installation method using curl -fsSL https://polylane.com/install.sh | bash. While this pattern is generally flagged for executing remote scripts, it is presented as a standard installation option for the vendor's own CLI tool ('polylane.com' belongs to the author 'coreplanelabs'). This is considered acceptable for the skill's primary purpose.
[CREDENTIALS_UNSAFE]: The skill manages authentication using OAuth and API keys (sk_xxxxx). It correctly identifies best practices by persisting OAuth credentials with restricted file permissions (0600) in ~/.polylane/credentials.json. The instructions to store secrets in a config file or use environment variables like POLYLANE_API_KEY are standard security practices.
[COMMAND_EXECUTION]: The skill provides commands to execute shell-like operations through its API (polylane tools code) and via typical CLI patterns. These are the core functionalities of an infrastructure management tool and operate within the user's local terminal environment.
[DATA_EXFILTRATION]: No evidence of unauthorized data exfiltration was found. The network operations (polylane api call, polylane thread ask, etc.) are directed at the vendor's official domain (polylane.com) for the purpose of interacting with the platform's API.

polylane-cli