The Agent Skills Directory

[SAFE]: The skill follows standard vendor patterns for orchestration and data synthesis. Technical analysis of the components revealed no security concerns:
Core Instructions: SKILL.md defines a clear orchestration logic for research tasks without any prompt injection or bypass attempts.
Shared Runtime: The scripts in _postplus_shared constitute a standard runtime environment for the PostPlusAI vendor, implementing legitimate features like configuration management in ~/.config/postplus and authorized communication with vendor APIs.
Media Downloads: The video download script uses the well-known yt_dlp tool via safe process spawning, which is consistent with the skill's purpose for marketplace research.
Data Handling: Sensitive information such as session tokens is managed through standard CLI configuration practices. All network operations use the vendor's own infrastructure or established marketplaces.

sourcing-selection