The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructions in SKILL.md direct the agent to detect the user's shell type and execute commands to modify shell startup files (~/.bashrc or ~/.zshrc). This is used to persist the QQMUSIC_API_KEY via export statements and subsequent source commands. While intended for configuration, modifying shell profiles is a persistence mechanism that could be abused to execute arbitrary commands at shell startup.
[EXTERNAL_DOWNLOADS]: The version.md file defines a protocol for the agent to check for updates and download new versions of the skill from github.com/tencentmusic/qqmusic-skills or y.qq.com. These are vendor-controlled resources belonging to Tencent Music, but the automated fetching and installation of code represents a remote update capability.
[CREDENTIALS_UNSAFE]: The skill setup process involves asking the user for a QQMUSIC_API_KEY and writing it in plain text to shell configuration files. While the instructions emphasize using environment variables in curl commands to avoid leaking the key in process lists, the storage in plaintext shell profiles is a security consideration.
[DATA_EXFILTRATION]: The skill possesses the capability to read user listening history and reports via the /me/report endpoint. The documentation in me.md correctly warns the user not to share this data with untrusted third parties.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data (song names, descriptions, and chart details) returned from the a.y.qq.com API.
Ingestion points: API responses processed in charts.md, discover.md, and playlists.md.
Boundary markers: Rule 7 in SKILL.md explicitly instructs the agent to treat external content as data only and ignore any embedded instructions or role-play requests.
Capability inventory: Shell command execution for profile modification (SKILL.md) and network access via curl (SKILL.md).
Sanitization: Relies on the provided prompt-based safety instructions in SKILL.md as no programmatic sanitization is defined in the provided markdown files.

qqmusic