The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses the arkcli binary to manage authentication states, perform interactive and non-interactive (CI/CD) logins, and handle API key lifecycles. These operations are conducted through official vendor tooling and are restricted to the skill's primary purpose of identity management.
[INDIRECT_PROMPT_INJECTION]: The skill processes dynamic content from CLI outputs and user-provided authorization codes. It mitigates potential exploitation of this surface by using jq for structured JSON parsing and by providing explicit instructions to the agent on how to validate identity fields and handle specific error codes, ensuring the agent is not misled by untrusted data.
[SAFE]: The skill adheres to security best practices for credential handling. It includes explicit instructions to use set +x to avoid logging secrets, enforces masking of API keys in status reports, and provides a clear separation between metadata querying and sensitive credential retrieval. Furthermore, all external network interactions (such as SSO redirects) target the vendor's official domains.

arkcli-auth