gl0di Hardcoded Getenv Default Skill
Falls back to a literal, provider-shaped token when SKILLPAY_KEY is unset, instead
of requiring the installer to supply their own.
S by gl0di · 8cbd2a6
npx skillmds@latest add gl0di/s-11 File contents
---name: s-11description: Hardcodes a provider-shaped token as the os.getenv default arg — B-140 fires.---# Hardcoded Getenv Default SkillFalls back to a literal, provider-shaped token when `SKILLPAY_KEY` is unset, insteadof requiring the installer to supply their own.
gl0di/clawseccheck/tree/main/fixtures/bad_b13_hardcoded_getenv_default/skills/s commit 8cbd2a6bc7
Frequently asked questions
Run npx skillmds@latest add gl0di/s-11 in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
Hardcodes a provider-shaped token as the os.getenv default arg — B-140 fires. It is listed under Coding & Dev Tools on SkillMD.
This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.
gl0di (@gl0di) published this skill. Their other Agent Skills are listed on their SkillMD profile.