The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/kodiak_config.py defines a function mcporter_call that uses subprocess.run to execute the mcporter CLI tool. This is used to fetch market data and clearinghouse states from the Senpi platform. The implementation uses a list of arguments and shell=False (default), which prevents common shell injection vulnerabilities.
[EXTERNAL_DOWNLOADS]: Both README.md and SKILL.md contain links to the author's official GitHub repository (github.com/Senpi-ai/senpi-skills) for documentation and strategy specifications. These are static references to documentation and do not result in the execution of remote code at runtime.
[DATA_EXPOSURE]: The skill reads account identifiers from environment variables (KODIAK_WALLET, KODIAK_STRATEGY_ID). Access is restricted to the skill's specific workspace directory (/data/workspace/skills/kodiak-strategy/state) for maintaining trade history and strategy state, following best practices for isolated storage.

kodiak-strategy