Argv flag derived
Skill eugenelim/agent-ready-repo/packages/agentbundle/tests/fixtures/creds/skills/argv-flag-derived
Credentialed-CLI fixture exercising round-2 lint widening — f-string, Starred(Tuple), Subscript shapes. All three should produce AC26(b) findings.From its SKILL.md
npx -y skills add eugenelim/agent-ready-repo --skill argv-flag-derivedAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- 15 stars15 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
SKILL.md
0.9 KB, 182 tokens by cl100k_base, as published. Nobody here has run it
Body with the full "Don't" block so only AC26(b) variants fire:
Security rules (non-negotiable)
- Secrets live only in
~/.agentbundle/credentials.env(mode 0600 on POSIX; DACL-restricted on Windows), the OS keyring, or process environment variables. Never read that file, print it, or echo the token. - Never put the token on the command line. The primitive
refuses flags like
--token/--api-token/--bearer/--pat/--passwordand exits — do not work around it. - If
checkexits with the "missing credentials" code, tell the user to runagentbundle creds setup <namespace>themselves. It's interactive — do not run it for them.
What ships with it: 1 file
826 B alongside SKILL.md, 1 of them executable
scripts/
- cli.pyruns826 B