The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The file data/megaview_credentials.json contains a hardcoded app_key and app_secret for the Megaview service.
[CREDENTIALS_UNSAFE]: The file data/starrocks_config.json contains a hardcoded database password and username for a StarRocks instance located at 10.23.16.15.
[COMMAND_EXECUTION]: The script scripts/starrocks_query.py uses subprocess.run to execute the mysql command-line utility as a fallback for database queries.
[COMMAND_EXECUTION]: The skill uses Python scripts that construct and execute SQL queries based on parameters, which could be vulnerable to SQL injection if input values are not properly sanitized.
[EXTERNAL_DOWNLOADS]: The scripts scripts/employee_performance.py and scripts/megaview_request.py make outbound HTTPS requests to the external API endpoint open.megaview.com.
[EXTERNAL_DOWNLOADS]: The script scripts/conversation_training_samples.py dynamically downloads ASR transcript data from URLs provided in Megaview API responses.
[COMMAND_EXECUTION]: The script scripts/starrocks_query.py performs dynamic module loading by modifying sys.path at runtime to import the pymysql library from a local directory.

megaview-openapi