The Agent Skills Directory

[COMMAND_EXECUTION]: The skill guides the user through the use of several CLI tools, including goldsky, npm, git, gh, and cast. These tools are used for project configuration, deployment, and verifying blockchain balances. The skill explicitly instructs the agent to show exact commands and wait for user confirmation before executing actions that modify state or secrets.
[CREDENTIALS_UNSAFE]: The workflow manages sensitive data including a Polygon EOA PRIVATE_KEY and a COMPOSE_WEBHOOK_AUTH token. It follows security best practices by:
Instructing the user to set secrets via platform-specific management tools (goldsky compose secret set) rather than environment variables.
Providing shell-safe command templates that prevent keys from being recorded in terminal history.
Including a pre-commit check to prevent accidental inclusion of private keys or PEM files in Git repositories.
[EXTERNAL_DOWNLOADS]: Utilizes npm install to resolve project dependencies. It also references an official vendor repository on GitHub (github.com/goldsky-io/fly-polymarket-proxy) for users wishing to deploy their own proxy infrastructure, which is consistent with the skill's technical requirements.
[DATA_EXFILTRATION]: Uses curl to communicate with the vendor's administrative API (api.goldsky.com) for task triggering and health checks. These operations are authenticated via user-provided tokens and are limited to the intended functionality of the copy-trader application.

compose-copy-trader-setup