kuaishou-lifeservice-business-assistant

This package appears to be a straightforward client for Kuaishou merchant APIs. Before installing or running it: - Confirm you trust the source (homepage and owner) and that those domains (open.kwailocallife.com, lbs-open.kuaishou.com) are legitimate for your organization. - Understand credential handling: the skill accepts either an ACCESS_TOKEN environment variable or app_key#merchant_id#app_secret stored via the provided api_key_manager; both approaches will result in tokens being cached to ./ .kuaishou-localife-token/. If you prefer not to persist secrets to disk, avoid using the api_key manager and provide only a short-lived token at runtime. - Protect the local token directory (set appropriate filesystem permissions) since it contains credentials. - Review the scripts yourself (they are included) if you have stricter security requirements — network calls are limited to Kuaishou domains only. - If you are unsure about the declared env var name (KWAI_ACCESS_TOKEN vs ACCESS_TOKEN), test the flow in a safe environment: either set the env token or add/select an app_key context via scripts/api_key_manager.py. Overall the skill is internally coherent for its described function; the main caution is to manage and protect the access token/app secret material appropriately.