The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The script caches API tokens retrieved from 1Password in plaintext at ~/.local/state/steveos/time-tracking/. While it attempts to restrict file permissions to the current user (0600), this creates a local, unencrypted copy of sensitive credentials outside of the secure vault.
[COMMAND_EXECUTION]: The script executes the 1Password CLI (op read) using shell backticks to retrieve secrets from the user's vault.
[INDIRECT_PROMPT_INJECTION]: The skill ingests data from external APIs (Toggl and Clockify), such as time entry descriptions and project names. This data is displayed back to the agent without sanitization. 1. Ingestion points: scripts/track (via TogglClient and ClockifyClient API calls). 2. Boundary markers: Absent. 3. Capability inventory: Subprocess calls (op read), file writing (File.binwrite in export command). 4. Sanitization: Absent; data is printed as JSON or raw strings.
[EXTERNAL_DOWNLOADS]: The Ruby script uses bundler/inline to download and install the thor and httparty gems from the official RubyGems registry at runtime.

time-tracking