The Agent Skills Directory

[Secure Credential Handling]: The skill provides instructions for managing authentication securely. It recommends using environment variables (DEVELOPERKNOWLEDGE_API_KEY, GOOGLE_API_KEY) or ephemeral tokens via gcloud auth print-access-token rather than hardcoding credentials directly into scripts. This aligns with industry-standard security practices for secret management.
[Communication with Official Services]: All network operations (using curl) and MCP tool calls are directed toward official Google developer domains (developerknowledge.googleapis.com). These are recognized, well-known services from the vendor, and no communication with untrusted or suspicious external servers was detected.
[Scoped Data Processing]: The skill is designed to retrieve and synthesize technical documentation from a predefined list of official Google domains (e.g., Google Cloud, Android, Firebase). It does not request access to sensitive local filesystem paths, user credentials files, or unrelated network resources.
[No Remote Execution Detected]: While the skill suggests using curl to fetch documentation, the output is parsed as data (Markdown/JSON) rather than being piped directly into a shell or interpreter for execution. This mitigates the risk of remote code execution from external sources.

retrieving-developer-knowledge