The Agent Skills Directory

[DATA_EXFILTRATION]: The skill includes instructions to read highly sensitive files that store credentials.
cat ~/.ssh/id_ed25519.pub: While this is the public key, the skill also generates the private key (~/.ssh/id_ed25519) in the same directory.
grep "github.com" ~/.git-credentials: This command explicitly extracts plaintext GitHub tokens from the local git credential store.
grep "^GITHUB_TOKEN=" ~/.hermes/.env: Reads credentials from a local environment configuration file.
[COMMAND_EXECUTION]: The skill uses several shell commands to configure the environment and manage credentials.
git config --global credential.helper store: Configures git to store credentials in plaintext on disk, which is a less secure practice than using a system keyring.
git remote set-url origin https://<username>:<token>@github.com/<owner>/<repo>.git: Encourages embedding plaintext tokens directly into git remote URLs, which are often stored in .git/config within the repository.
ssh-keygen -t ed25519 -f ~/.ssh/id_ed25519 -N "": Generates an SSH key pair without a passphrase, which lowers the barrier for unauthorized use if the private key is compromised.

github-auth