SKILL.md - TokenBroker Skillset

Security & Data Privacy

Local Storage Only

• All credentials (GitHub token, private keys, API keys) are stored locally in a .env file
• No credentials are transmitted to external servers beyond their intended endpoints (GitHub API, nad.fun API, Monad RPC)
• The skill operates entirely within your local environment

.env File Generation

• The Install Wizard generates a .env file on your local machine
• This file is never committed to version control (gitignored)
• You can review and edit it at any time

Credential Scope

• GITHUB_TOKEN: Used only for GitHub API calls to read public repository data
• PRIVATE_KEY: Used only for EVM transaction signing (never exposed in plain text)
• BUILDER_ID: Local identifier for A2A protocol
• NAD_FUN_API_KEY: Used only for nad.fun token creation API