The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/gossamer.py uses subprocess.run to execute a local maintenance script (check_update.py) and optionally runs npx skills add to install a related update-check skill from the vendor's repository. These operations are part of a maintenance flow and are gated by user interaction or specific diagnostic signals.
[EXTERNAL_DOWNLOADS]: The skill fetches model configuration JSON files from a vendor-managed CDN (alioth-intl.alicdn.com). This is a standard operation to ensure the agent has access to the most recent model metadata and task recommendations.
[DYNAMIC_EXECUTION]: The update-check mechanism in scripts/gossamer.py programmatically locates and executes a Python script within a sibling skill directory. The path is constrained to the managed repository structure and is used for version verification.
[SAFE]: The skill follows security best practices for credential handling, including explicit instructions to avoid plaintext API keys, implementing masking for keys in logs, and providing a sanitization utility to prevent sensitive data from appearing in diagnostic output.

qwencloud-vision