The Agent Skills Directory

[SAFE]: The skill facilitates the management of authentication credentials (OAuth tokens and App Secrets) for a CLI tool as its primary function. It includes explicit security rules directing the agent never to output sensitive information like app_secret, access_token, or refresh_token in plain text.
[SAFE]: The skill encourages the use of environment variables (e.g., CONTRACT_CLI_BOT_APP_SECRET) for handling credentials, which is a standard security best practice for avoiding hardcoded secrets in command history or scripts.
[DATA_EXPOSURE]: The skill identifies local file paths used for persistence, specifically ~/.contract-cli/config.json and ~/.contract-cli/secrets.json. These are documented as the tool's intended storage mechanism for session data and are used for troubleshooting legitimate persistence issues rather than unauthorized data harvesting.

auth