The Agent Skills Directory

[DATA_EXPOSURE]: The skill manages authentication using the DOUBAOYA_API_KEY environment variable. It explicitly instructs users not to hardcode or print this key, following standard security practices for secret management.
[EXTERNAL_DOWNLOADS]: The skill communicates with https://doubaoya.com, which is the official API endpoint for the service provided by the author (zizhanovo). It does not download or execute code from untrusted third-party sources.
[COMMAND_EXECUTION]: The execution of the fetch_work_list.py script is handled using standard parameters. The script uses the argparse library to safely handle inputs, mitigating risks of command injection.
[INDIRECT_PROMPT_INJECTION]: The skill processes external data (Douyin titles and account names). While this presents a surface for indirect prompt injection if the fetched content contains malicious instructions, the skill treats the data as structured JSON output, and the risk is considered low and inherent to data-fetching tasks.

douyin-subscribe