Name: um-vpn
Author: xiaosq2000

Imported from xiaosq2000/um-vpn (AGENTS.md). Install upstream with npx skills add xiaosq2000/um-vpn. Copyright stays with the author.

AGENTS.md

um-vpn connects to the University of Macau SSL VPN. It reads the portal's DSID session cookie from a Chrome login over DevTools and hands it to NetworkManager's openconnect plugin. All of it is in um_vpn.py. README.md is for users; docs/decisions.md records why it is built this way and what failed before.

Verify

uv run pytest && pre-commit run --all-files must pass before a commit. The tests drive headless Chrome against a stand-in portal on 127.0.0.1 and a fake nmcli: no Duo, no network change, no sudo.

Hard limits

.claude/settings.json enforces what it can of these.

Don't run um-vpn bare, um-vpn on|off|forget, or nmcli connection up|down|delete. Each costs the user a real Duo push or changes their real network. um-vpn status is safe; ask the user to run the rest.
Don't read ~/.local/share/um-vpn/: the Chrome profile there holds a live ADFS sign-in. Never print a DSID value.
Never put a secret in argv or the environment. ps shows every argv to every user, and children inherit the environment.

When you find a trap

Remove it, or pin it with a test. Don't add a paragraph here.

Conventions

Conventional Commits. PEP 8 at 79 columns, enforced by ruff. Comments say why, not what. The repository will become public, so commits carry no machine-specific paths or personal details.

# after Install: the listing is in your workspace's routing pool - a plan picks it for its slot curl -s -X POST https://api.opensmartroute.ai/api/v1/route -H 'Authorization: Bearer $OSR_API_KEY' -H 'Content-Type: application/json' -d '{"text": "...", "plan": true}'

{ "ocm": "1", "id": "xiaosq2000-um-vpn-um-vpn", "kind": "skill", "name": "um-vpn", "description": "um-vpn connects to the University of Macau SSL VPN. It reads the portal's `DSID` session cookie from a Chrome login over DevTools and hands it to NetworkManager's openconnect plugin. All of it is in `um_vpn.py`. README.md is for users; docs/decisions.md records why it is built this way and what failed before.", "publisher": "xiaosq2000", "version": "1.0.0", "capabilities": { "domains": [ "coding" ], "tags": [ "skill-md", "github-agents" ], "languages": [ "en" ] }, "quality_prior": 0.6, "examples": [ "um-vpn connects to the University of Macau SSL VPN. It reads the portal's `DSID` session cookie from a Chrome login over DevTools and hands it to NetworkManager's openconnect plugin. All of it is in `um_vpn.py`. README.md is for users; docs/decisions.md records why it is built this way and what failed before." ], "primary": false, "metadata": { "source": { "provider": "github-agents", "repository": "https://github.com/xiaosq2000/um-vpn", "path": "AGENTS.md", "ref": "ec2566ee3583a6b26e953aa6df4293e810ec68a1", "url": "https://github.com/xiaosq2000/um-vpn/blob/ec2566ee3583a6b26e953aa6df4293e810ec68a1/AGENTS.md", "key": "xiaosq2000/um-vpn/AGENTS.md" } }, "instructions": "# AGENTS.md\n\num-vpn connects to the University of Macau SSL VPN. It reads the portal's `DSID`\nsession cookie from a Chrome login over DevTools and hands it to\nNetworkManager's openconnect plugin. All of it is in `um_vpn.py`. README.md is\nfor users; docs/decisions.md records why it is built this way and what failed\nbefore.\n\n## Verify\n\n`uv run pytest && pre-commit run --all-files` must pass before a commit. The\ntests drive headless Chrome against a stand-in portal on 127.0.0.1 and a fake\nnmcli: no Duo, no network change, no sudo.\n\n## Hard limits\n\n`.claude/settings.json` enforces what it can of t", "cost": { "context_tokens": 340 } }

um-vpn

About

AGENTS.md

Verify

Hard limits

When you find a trap

Conventions

Use it

Manifest

Reviews