The Agent Skills Directory

[SAFE]: The skill documentation strongly advocates for secure practices by instructing the agent to move credentials from collection files into environment variables and CI secrets.
[SAFE]: Although the evaluation tasks (evals/) contain credential-like strings (e.g., whsec_live_..., ptk_live_...), these are explicitly provided as test fixtures for the agent to identify and remediate as part of its training. They are not functional credentials for the skill itself.
[SAFE]: The external dependencies and tools referenced, such as the official Postman Newman CLI and standard GitHub Actions for reporting, are well-known and reputable within the software development community.

postman-collections