The Agent Skills Directory

[COMMAND_EXECUTION]: The skill invokes local system utilities such as curl and python3 via a bash script. It follows best practices by validating all user-supplied inputs, including strict regex checks for HTTPS URLs and integer range checks, preventing command injection.
[EXTERNAL_DOWNLOADS]: The script downloads video results from Volcengine's official storage service (tos-cn-beijing.volces.com). This is a documented and necessary feature of the video generation workflow.
[DATA_EXFILTRATION]: User prompts and media URLs are transmitted to the Volcengine Ark API. The skill uses a Python helper script to correctly encode and escape these values into JSON format, ensuring that data is handled securely during transmission.
[SAFE]: The ARK_API_KEY is managed securely by writing it to a temporary file with restricted permissions (chmod 600), which is then passed to curl using the @filename syntax. This methodology ensures the secret is never exposed in process lists or shell history.

seedance2