The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The function get_replicate_token in scripts/_common.py attempts to find API tokens by reading configuration files from various sibling skill directories located in the user's home directory (~/.cursor/skills/). Additionally, scripts/setup_key.py stores tokens in a local config.json file.
[DATA_EXFILTRATION]: If local tunneling tools are not present, the upload_to_public_host function in scripts/_common.py uploads the user's voice audio files to public third-party hosting sites tmpfiles.org and catbox.moe. This exposes potentially sensitive audio data to the public internet.
[COMMAND_EXECUTION]: The skill frequently uses subprocess.run and subprocess.Popen to call external binaries including cloudflared, ngrok, curl, dig, and ffmpeg. These calls involve dynamically constructed arguments such as URLs and file paths.
[EXTERNAL_DOWNLOADS]: The download_file utility in scripts/_common.py fetches audio files from remote providers (Replicate and ElevenLabs) and saves them to the local generated-audios directory.
[DYNAMIC_EXECUTION]: The skill uses __import__ in scripts/_common.py to dynamically load the replicate package at runtime.

voice-clone