Auth Interview

What problem does it solve?

This skill bootstraps ~/.agent-skills/auth/auth.yaml. It guides the user through which external sources (AWS, Azure, SharePoint/M365, SMB) they use, which LLM providers they use (Anthropic, OpenAI, Gemini, Groq, HuggingFace, Mistral, Cohere, local Ollama/llama.cpp/vLLM), and where each credential is stored (1Password, Bitwarden, Keeper, Vault, macOS Keychain, Windows Credential Manager, Linux libsecret, OAuth interactive, env vars, or a custom script). Writes the config with permissions 0600. Use when the user says 'set up auth', 'configure credentials', 'first-time setup', or when auth-config reports no config file exists.

Core Features & Use Cases

• Interactive interview to generate the config at ~/.agent-skills/auth/auth.yaml with strict permissions.
• Detects available vault CLIs (op, bw, keeper, vault, security, cmdkey, secret-tool, kwallet-query, az, m365, gcloud, gh) to tailor provider options.
• Reads references/providers.md for provider schemas and supports both OAuth interactive flows and env-var based credentials.
• Guides Section 1 — External sources (AWS, Azure, SharePoint/M365, SMB) with per-source credential-storage prompts and follow-ups.
• Guides Section 2 — Model providers (hosted and local) with per-provider configuration, env-var export, and per-provider URL defaults.
• Guides Section 3 — Preview + write: renders the YAML, prompts for writing, and performs a dry validation of each entry.
• Guides Section 4 — Update mode: add, modify, or start over existing configurations with backups.
• Edge-case handling and UX safeguards: vault CLI absence, multiple 1Password accounts, OS-mismatch warnings, per-repo overrides notes, headless/CI handling.
• Security-first: no vault writes, no password copying, and strict file permissions (0600).

Quick Start

Run the auth interview to bootstrap ~/.agent-skills/auth/auth.yaml and begin configuring credentials securely.