The Agent Skills Directory

[COMMAND_EXECUTION]: The skill includes a detection script (scripts/detect_gpc.mjs) that utilizes execSync to verify GPC's installation version and authentication status. These operations are limited to environment discovery.
[EXTERNAL_DOWNLOADS]: Instructions reference the use of official CLI tools such as gcloud and gh (GitHub CLI) for managing service account keys and updating repository secrets. These are standard operations involving well-known technology services.
[SAFE]: The destructive command detection in references/key-rotation.md is a false positive; the shell commands rm -rf ~/.cache/gpc/tokens/, rm -P, and shred -u are appropriately used for clearing local credential caches and performing secure deletion of sensitive key files after rotation.

gpc-security