The Agent Skills Directory

[SAFE]: The skill provides a robust template for manual setup procedures that actually improves security posture by encouraging the use of ask_secret for sensitive inputs and facilitating standard secret management practices (writing to .env or using the GitHub CLI for secrets).
[COMMAND_EXECUTION]: The template.sh script executes standard system utilities like tput, grep, mktemp, gh, and cross-platform browser openers (wslview, explorer.exe, xdg-open, open). These are used correctly for their intended purpose of providing a better UI and interacting with the user's environment.
[DATA_EXPOSURE]: The script reads and writes to a local .env file. It follows best practices by ensuring the file is created with restricted permissions (umask 077). It does not exfiltrate this data to any third-party services; it only optionally sends secrets to the user's own GitHub repository via the official gh CLI if the user has it configured.

wizard