The Agent Skills Directory

[SAFE]: The skill implements robust security controls for archive extraction. The _is_safe_member function explicitly checks for path traversal attempts (Zip-Slip/Tar-Slip) by rejecting directory escape sequences (..), absolute paths, and symbolic links during the extraction process.
[DATA_EXFILTRATION]: The skill facilitates the transfer of files to and from an internal storage service (sc-agent-backup.internal). This behavior is the primary stated purpose of the skill for agent-to-agent collaboration and utilizes authenticated, internal-only communication channels.
[COMMAND_EXECUTION]: The skill includes a Python CLI tool (scripts/tf.py) intended to be executed by the agent to manage file transfers. The script relies solely on Python's standard library, minimizing the risk of supply chain attacks or unverified external dependencies.
[EXTERNAL_DOWNLOADS]: The skill downloads content from an internal service. It uses urllib.request with a timeout and enforces identity verification through the CONTAINER_JWT environment variable.

temp-files