The Agent Skills Directory

[COMMAND_EXECUTION]: The template.sh script executes shell commands to open URLs (wslview, explorer.exe, xdg-open, open) and manage GitHub secrets (gh secret set). These are legitimate actions for the intended functionality of a setup wizard.
[CREDENTIALS_UNSAFE]: While the skill is designed to handle credentials, it employs security best practices by using the ask_secret function, which invokes read -rs to prevent secrets from being echoed to the terminal. It writes these secrets to .env or GitHub Secrets, which are standard and secure developer practices.
[DATA_EXFILTRATION]: All data handling is confined to the user's local environment and their specific GitHub repository settings. There is no mechanism within the provided code to exfiltrate data to a third-party server.

wizard