The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses subprocess.run to call system utilities expect and ffprobe. These are used for the legitimate purpose of automating password-based SCP transfers and validating the media duration of generated files. Arguments are passed as lists, mitigating local shell injection risks.
[CREDENTIALS_UNSAFE]: The skill manages sensitive data such as the AUTODL_TOKEN and SSH root passwords for the GPU instances. It follows safe practices by retrieving these from environment variables or local configuration files (~/.config/autodl.env) rather than hardcoding them. The documentation explicitly warns against printing or logging these credentials.
[DYNAMIC_EXECUTION]: The skill dynamically generates a temporary expect script to handle interactive SSH password prompts during the SCP download phase. The script is written to a secure temporary file and removed immediately after use, which is a standard pattern for automating tools that do not support direct password flags.
[REMOTE_CODE_EXECUTION]: The skill executes commands on a remote server via SSH (using ssh_expect). This is used to submit JSON prompts to a local ComfyUI instance and locate generated files. These operations are performed on the user's own cloud instances, and the command payloads are safely constructed using base64 encoding to prevent injection.

minimax-music-gen