The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses eval for script argument manipulation and python3 -c for utility tasks such as URL encoding and currency unit conversion. These operations are implemented safely using shell-quoting (printf %q) and do not process untrusted external input as executable code.
[EXTERNAL_DOWNLOADS]: The skill makes network requests using curl to tonapi.io and rt.tonapi.io. These are the official API endpoints for the TonAPI service and are used exclusively for the primary purpose of the skill.
[CREDENTIALS_UNSAFE]: config/README.md contains a mock API token used for documentation purposes. It is clearly labeled as an example for user configuration and does not represent a leaked or hardcoded secret.
[DATA_EXPOSURE]: The skill accesses a local configuration file config/.env to retrieve the user's API token. This is the intended and standard method for managing credentials in this skill.

tonapi