Imported from eugenelim/agent-ready-repo (
packages/agentbundle/tests/fixtures/creds/skills/argv-flag/SKILL.md). Install upstream withnpx skills add eugenelim/agent-ready-repo --skill argv-flag. Copyright stays with the author.
Body content with the full "Don't" block (so the missing-block check is silent and the argv finding is the only one fired):
Security rules (non-negotiable)
- Secrets live only in
~/.agentbundle/credentials.env(mode 0600 on POSIX; DACL-restricted on Windows), the OS keyring, or process environment variables. Never read that file, print it, or echo the token. - Never put the token on the command line. The primitive
refuses flags like
--token/--api-token/--bearer/--pat/--passwordand exits — do not work around it. - If
checkexits with the "missing credentials" code, tell the user to runagentbundle creds setup <namespace>themselves. It's interactive — do not run it for them.