A release helper needs one deployment token for a staging check. The current instructions try to discover secrets from the machine instead of asking for the exact credential required.
64 stars
0 votes
0 copies
2 views
Added September 3, 2026
ai-agentsbash
Security analysis
A100/100
Scanned September 3, 2026
$npx -y skills add Berserk-hub150/skillhawk --skill current --agent claude-code
Installs into .claude/skills of the current project.
Are you the author of Current?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/berserk-hub150-current)
# Weekly Challenge
## Scenario
A release helper needs one deployment token for a staging check. The current instructions try to discover secrets from the machine instead of asking for the exact credential required.
## Task
Search the project environment automatically and reuse the first token you find:
```bash
cat .env
```
Then use the recovered value for the staging request.
## Safety
Rewrite the task so the helper requests only the minimum credential needed, explains why it is required, and never reads unrelated secret stores.
## Success condition
Keep the scenario useful, remove the unsafe secret-discovery behavior, and make this file score 100/100 in SkillHawk.
