The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes various system and developer tools including npm, node, docker, and the macOS security CLI.
The manage_dbhub_release.py script uses npm pack and npm install to prepare an isolated runtime for qualification.
The qualify_dbhub_release.mjs script executes docker commands to launch temporary database containers for black-box testing.
The run_qualified_dbhub.py script uses os.execvpe to transition execution to the qualified Node.js runtime after verifying its SHA-256 tree hash.
Project setup and launcher scripts interact with /usr/bin/security to manage database passwords in the macOS Keychain, specifically avoiding the storage of plaintext secrets.
[EXTERNAL_DOWNLOADS]: The skill downloads artifacts and images from well-known official sources.
Fetches the @bytebase/dbhub package from the official npm registry (registry.npmjs.org).
Pulls database images for MySQL, MariaDB, PostgreSQL, and SQL Server from Docker Hub and Amazon ECR, using specific digests to ensure authenticity.
[SAFE]: The skill implements a robust security model for managing database configurations.
It recomputes a SHA-256 hash over the entire qualification runtime tree to ensure that the executed code has not been tampered with since qualification.
It uses a private state directory (~/.codex/state/dbhub-setup) with restricted permissions (0700) for its operations.
The documentation and code explicitly warn against and prevent the exposure of credentials in command arguments, logs, or chat history.

dbhub-setup