The Agent Skills Directory

[DATA_EXPOSURE]: The skill instructions specify the retrieval of authentication tokens from provider-specific local files (e.g., ~/.codex/auth.json, ~/.grok/auth.json, credentials.toml) and system keychains (macOS Keychain, Windows Credential Manager). This behavior is documented as the primary function of the skill's adapter logic.
[COMMAND_EXECUTION]: The skill utilizes local CLI tools to query system state and usage data, specifically calling sqlite3 for database reads, agy for Google Antigravity quotas, and the higgsfield CLI for account status. The instructions include a safety check to report failure rather than attempting to install missing packages.
[SAFE]: The skill implementation details include several proactive security controls:
Host Validation: Tokens for the Devin provider are strictly pinned to https://server.codeium.com, preventing leakage to unauthorized server URLs.
Read-Only Access: Database interactions with the Cursor state database are restricted to sqlite3 -readonly mode.
Data Minimization: During Higgsfield jobs rollups, sensitive identifiers such as job IDs, prompts, and URLs are explicitly discarded to protect privacy.
Isolation: Delegated refresh operations are only permitted when the primary CLI processes are not running to avoid race conditions or cache corruption.

provider-adapters