Argv flag
Skill eugenelim/agent-ready-repo/packages/agentbundle/tests/fixtures/creds/skills/argv-flag
Credentialed-CLI fixture whose script accepts `--token` on argv; AC26(b) finding expected.From its SKILL.md
npx -y skills add eugenelim/agent-ready-repo --skill argv-flagAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- 15 stars15 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
SKILL.md
0.9 KB, 193 tokens by cl100k_base, as published. Nobody here has run it
Body content with the full "Don't" block (so AC26(a) is silent and the argv finding is the only one fired):
Security rules (non-negotiable)
- Secrets live only in
~/.agentbundle/credentials.env(mode 0600 on POSIX; DACL-restricted on Windows), the OS keyring, or process environment variables. Never read that file, print it, or echo the token. - Never put the token on the command line. The primitive
refuses flags like
--token/--api-token/--bearer/--pat/--passwordand exits — do not work around it. - If
checkexits with the "missing credentials" code, tell the user to runagentbundle creds setup <namespace>themselves. It's interactive — do not run it for them.
What ships with it: 1 file
317 B alongside SKILL.md, 1 of them executable
scripts/
- cli.pyruns317 B