The Agent Skills Directory

[COMMAND_EXECUTION]: The skills make extensive use of system commands such as git, gh, curl, and python3 to automate GitHub operations. These commands are used consistently with the stated purpose of repository and project management.
[EXTERNAL_DOWNLOADS]: The codebase-inspection skill installs the pygount utility via pip to facilitate repository analysis (counting lines of code). This is a standard practice for the functionality provided.
[DATA_EXPOSURE]: Several files include logic to read from sensitive local paths such as ~/.git-credentials, ~/.ssh/id_rsa, and ~/.hermes/.env. These operations are used to retrieve or configure authentication tokens and SSH keys specifically for interaction with GitHub's official services.
[CREDENTIALS_UNSAFE]: The github-auth skill documents the use of the git credential-store helper, which saves tokens in plaintext in ~/.git-credentials. While this is a standard Git feature for automated environments, it is a less secure storage method compared to encrypted credential managers.

github