The Agent Skills Directory

[COMMAND_EXECUTION]: The scripts/fetch_code.py script executes official CLI tools (op for 1Password and bw for Bitwarden) using subprocess.run. The implementation passes arguments as a list rather than a shell string, which prevents command injection vulnerabilities.
[EXTERNAL_DOWNLOADS]: The skill documents and automates interaction with trusted third-party services and APIs, including 1Password, Bitwarden, HashiCorp Vault, and 2FAuth. These references target established and reputable services.
[SAFE]: The implementation follows robust security practices for handling sensitive credentials. It leverages environment variables for authentication, implements a 30-second timeout to prevent indefinite process hangs, and uses a strict regular expression to validate tool output, ensuring only valid TOTP codes are returned while preventing the accidental processing of sensitive metadata or CLI banners.

totp-provider-api