The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill downloads a relay SDK ('tuplatform-connect') from 'https://connect.aiscientist.tools/'. This is a well-known service domain for the 'mims-harvard' vendor and uses a pinned SHA-256 hash to ensure file integrity.- [CREDENTIALS_UNSAFE]: The instructions explicitly warn against including tokens or keys in command arguments or results. It recommends using protected environment variables or local files with restricted permissions (0600) for managing the 'TOOLUNIVERSE_SERVICE_KEY' and 'TOOLUNIVERSE_API_TOKEN'.- [COMMAND_EXECUTION]: The skill includes shell commands for environment setup (venv, pip install) and local tool verification. These commands are standard for development workflows and are scoped to the project root and isolated virtual environments.- [DATA_EXFILTRATION]: No patterns of data exfiltration were detected. The skill uses a 'tu remote login' flow that utilizes short-lived device codes and browser-based approval, avoiding the need for manual key handling that could be intercepted.- [PROMPT_INJECTION]: The skill body contains technical instructions for tool deployment and validation without any attempts to override agent behavior or bypass safety filters.

setup-scvi-remote-tool