The Agent Skills Directory

[COMMAND_EXECUTION]: The scripts/drive.py script uses subprocess.run to execute curl for multipart file uploads. This is a standard method for handling large file transfers that are difficult in pure Python without external libraries. The command is constructed using a list of arguments, which mitigates shell injection risks.
[SAFE]: Credentials (WXWORK_CORP_ID, WXWORK_CORP_SECRET, OFB_KEY) are managed via environment variables (daemon.env), which is the recommended secure practice for this platform rather than hardcoding or prompting the user directly.
[SAFE]: The skill uses a local file spaces.json to cache non-sensitive identifiers (space IDs and folder IDs). The script correctly attempts to set restricted file permissions (0o600) on this file to ensure it is only readable by the agent process.

wxwork-drive