Mysteel_BidSupply

This skill appears to do what it says: query Mysteel bidding and supply/demand APIs. Before installing, consider the following: 1) API key handling — the scripts save the API key as plaintext in references/api_key.md inside the skill directory. Avoid storing long-lived secrets there if you care about leakage (prefer an environment variable or a secure secret store and update the scripts accordingly). 2) Output handling — SKILL.md asks not to show raw JSON, but the scripts print raw JSON; if you don't want raw responses exposed, make sure the agent or caller parses and sanitizes the output before displaying. 3) Network endpoints — the scripts call https://mcp.mysteel.com; verify that this domain is expected and acceptable for your use. 4) Dependencies — the scripts require the Python requests package. Run the tool in a controlled environment (sandbox) the first time to observe behavior and avoid committing the api_key.md file to version control. If you want higher assurance, request or review an explicit specification for how API keys should be provided (env var or OS secret store) and/or adjust the scripts to avoid writing plaintext credentials to disk.