The Agent Skills Directory

[SAFE]: The skill implements a standard CLI wrapper for the HEY service. All external interactions are conducted through the hey command-line tool, which is a legitimate vendor resource from Basecamp.
[SAFE]: No hardcoded credentials or API keys were detected. The skill correctly utilizes the hey auth login and hey auth token commands for authentication, following standard OAuth and token-based security practices.
[SAFE]: Remote code execution and external download patterns were not found. The skill relies entirely on the pre-installed hey CLI and does not attempt to fetch or execute scripts from untrusted domains.
[SAFE]: Data handling is restricted to the user's HEY account. The skill's instructions emphasize using structured output (--json, --jq) and respect user privacy by requiring explicit approval for trusting local repository settings (hey config trust-local).
[SAFE]: No obfuscation, persistence mechanisms, or privilege escalation attempts were identified. The instructions are transparent and align with the stated purpose of managing HEY account data.

hey