The Agent Skills Directory

[COMMAND_EXECUTION]: The script executes the external biliup CLI tool using subprocess.call and subprocess.run with argument lists. This implementation avoids the use of a shell (shell=False), effectively preventing command injection vulnerabilities.- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided content such as video titles, descriptions, and tags. It mitigates risk by utilizing a content_guard utility to scan this untrusted data for secrets, credentials, or internal file paths before any execution or network transmission occurs.- [EXTERNAL_DOWNLOADS]: The skill requires the biliup package, which is a well-known open-source tool for Bilibili uploads. This dependency is necessary for the skill's primary function and is documented appropriately.- [DATA_EXPOSURE]: The skill manages session state via a cookies.json file. The documentation and scripts correctly treat this as sensitive information and advise the user on its proper handling.

skill-bilibili-upload