Credentialed primitive that legitimately reads the dotfile, with the opt-out marker on the same line; lint must NOT flag it.
Scanned 9/3/2026
Install to Claude Code
Skills Directorynpx -y skills add eugenelim/agent-ready-repo --skill dotfile-with-optout --agent claude-codeInstalls into .claude/skills of the current project.
Are you the author of Dotfile With Optout?
Add the live security badge to your README — it updates automatically with every re-scan.
[](https://www.skillsdirectory.com/skills/eugenelim-dotfile-with-optout)More formats (shields.io, HTML) on the badges page.
---
name: dotfile-with-optout
description: Credentialed primitive that legitimately reads the dotfile, with the opt-out marker on the same line; lint must NOT flag it.
metadata:
credentialed: true
auth: creds
primitive-class: credentialed-cli
---
The credentialed-primitive itself (not a skill) legitimately reads the
dotfile. The opt-out comment names the relaxation explicitly so PR review
can see and approve.
### Security rules (non-negotiable)
- Secrets live only in `~/.agentbundle/credentials.env`
(mode 0600 on POSIX; DACL-restricted on Windows), the OS keyring,
or process environment variables.
**Never** read that file, print it, or echo the token.
- **Never** put the token on the command line. The primitive
refuses flags like `--token` / `--api-token` / `--bearer` /
`--pat` / `--password` and exits — do not work around it.
- If `check` exits with the "missing credentials" code, tell the
user to run `agentbundle creds setup <namespace>` themselves.
It's interactive — do not run it for them.
Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.
No comments yet. Be the first to comment!
