The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses subprocess.run to coordinate execution between its various scripts (jimeng_run.py, jimeng_batch.py, and jimeng_workflow.py). Analysis confirms that arguments are passed as lists and not through a shell, preventing command injection vulnerabilities.
[EXTERNAL_DOWNLOADS]: The skill makes network requests to ark.cn-beijing.volces.com to interact with the Volcengine Ark image generation service. It also downloads the resulting image files from the URLs provided by the API. These operations are essential to the skill's documented functionality and target well-known service endpoints.
[CREDENTIALS_UNSAFE]: Security best practices are followed by utilizing environment variables for API authentication. The skill provides a .env.example file to guide users, and no hardcoded secrets or sensitive credentials were detected in the source code.

jimeng-image