The Agent Skills Directory

[COMMAND_EXECUTION]: The script monitor.py executes several external binaries including streamlink, ffprobe, and openclaw. These are executed using the subprocess module with arguments passed as a list, which effectively prevents shell command injection.
[CREDENTIALS_UNSAFE]: The skill documentation mentions the use of a Google OAuth token located at ~/.config/ares/google/token.json. This follows security best practices by referencing a configuration file in the user's home directory rather than including or hardcoding credentials within the skill itself.
[EXTERNAL_DOWNLOADS]: The skill documentation guides the user to install streamlink via Homebrew and optional Python packages (google-api-python-client) for Drive uploads. These are well-known tools and official libraries.
[COMMAND_EXECUTION]: An optional upload_script path can be provided in the configuration. This script is executed via Python 3 to handle post-recording uploads using standard subprocess calls.

twitch-stream-monitor