Dotfile Grep

Credentialed fixture whose script opens `.agentbundle/credentials.env` directly without the opt-out marker; a dotfile-read finding is expected.

eugenelim 74c2685 2 files · 1.1 KB Updated

File contents

Body with the full "Don't" block so only the dotfile-read check fires:

Security rules (non-negotiable)

  • Secrets live only in ~/.agentbundle/credentials.env (mode 0600 on POSIX; DACL-restricted on Windows), the OS keyring, or process environment variables. Never read that file, print it, or echo the token.
  • Never put the token on the command line. The primitive refuses flags like --token / --api-token / --bearer / --pat / --password and exits — do not work around it.
  • If check exits with the "missing credentials" code, tell the user to run agentbundle creds setup <namespace> themselves. It's interactive — do not run it for them.

eugenelim/agent-ready-repo/tree/main/packages/agentbundle/tests/fixtures/creds/skills/dotfile-grep commit 74c2685c4e

Frequently asked questions

npx skillmds@latest add eugenelim/dotfile-grep