The Agent Skills Directory

[SAFE]: The skill serves as a generator for interactive setup scripts. Its primary function is to automate the documentation of manual steps, such as fetching API keys from a dashboard and saving them to .env files or GitHub Secrets.
[COMMAND_EXECUTION]: The template.sh file uses standard Bash commands (grep, touch, mktemp, mv, read) and CLI tools like gh (GitHub CLI) to perform its tasks. These commands are used for local file management and legitimate secret management via the official GitHub tool.
[DATA_EXPOSURE_AND_EXFILTRATION]: While the skill handles sensitive data (secrets and API keys), it does so by prompting the user to paste them and then saving them to the user's own local .env files or their own GitHub repository via gh secret set. There is no evidence of data being sent to unauthorized third-party domains.
[EXTERNAL_DOWNLOADS]: The skill uses open_url to open legitimate service dashboards (e.g., Stripe) in the user's browser. These URLs are clearly visible to the user and are intended for the user's manual interaction.

wizard