The Agent Skills Directory

[COMMAND_EXECUTION]: The scripts/shaka.py script acts as a wrapper for the packager CLI tool. It uses subprocess.call() with an argument list rather than a shell string, which is the recommended secure practice to prevent shell injection. Additionally, it uses shlex.quote() when printing commands for user visibility.
[EXTERNAL_DOWNLOADS]: The skill references official installation methods for Shaka Packager, including Homebrew, Docker (via Google's official image), and the official GitHub repository. These are verified and legitimate sources for the software mentioned.
[CREDENTIALS_UNSAFE]: The documentation and script examples use appropriate placeholders like YOUR_PROVIDER, KEY_HEX, and YOUR_AES_SIGNING_KEY_HEX. These are standard practice for tutorials and do not represent a credential leak.

media-shaka