The Agent Skills Directory

[SAFE]: The skill implements a secure credential collection process using a local HTTP server (credential-form.js) that only listens on 127.0.0.1. This ensures that sensitive API keys are written directly to a gitignored .env.local file and never appear in the agent's chat history or shell logs. The read-env-value.js script further secures this by reading values directly via Node.js to avoid shell expansion vulnerabilities during deployment tasks.\n- [COMMAND_EXECUTION]: The skill automates project setup and deployment by executing standard command-line tools like git, gh, vercel, and firebase. It also runs several purpose-built Node.js helper scripts to manage local state and poll for deployment status without relying on platform-specific shell syntax.\n- [EXTERNAL_DOWNLOADS]: The skill includes instructions to download the gitleaks security tool from its official GitHub repository if it is not present on the host system. GitHub is a well-known and trusted service for software distribution.

free-live-dev