The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The README.md file promotes an installation method using irm is.gd/rpb65M | iex. This command downloads and executes a remote PowerShell script from a shortened URL, which obscures the final destination and source code.
[REMOTE_CODE_EXECUTION]: The skill uses websockets in scripts/universal_tts.py to connect to ByteDance's internal SAMI TTS service (wss://sami.bytedance.com/internal/api/v2/ws) using identifiers harvested from the user's local system.
[COMMAND_EXECUTION]: Multiple components use subprocess to execute system commands:
tools/recording/recorder.py and scripts/utils/media_normalizer.py execute ffmpeg for recording and transcoding.
examples/robust_auto_export.py identifies and executes the JianYing Pro executable found via the Windows registry.
scripts/api_validator.py and scripts/utils/formatters.py execute ffprobe to extract media metadata.
[CREDENTIALS_UNSAFE]:
scripts/universal_tts.py contains a hardcoded APP_KEY = "IZjhUeAYwP" used for the SAMI TTS API.
scripts/universal_tts.py includes a get_jy_local_config function that scans local application files (tt_net_config.config) and log directories to extract device_id and iid tokens required for API authentication.
[OBFUSCATION]: The skill utilizes a shortened URL (is.gd/rpb65M) for its one-click installer, hiding the actual repository or script host from immediate view.
[PRIVILEGE_ESCALATION]: scripts/universal_tts.py and scripts/utils/config.py implement a mechanism to bypass TLS certificate verification (ssl.CERT_NONE) if the JY_TTS_INSECURE_SSL environment variable is set, which could expose the agent to man-in-the-middle attacks.

jianying-editor