dotfile-with-optout

Validate credentialed primitives reading protected dotfiles with same-line opt-out annotations.

15|5|Updated May 4, 2026
One-click install
npx skills add https://github.com/eugenelim/agent-ready-repo --skill dotfile-with-optout
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: dotfile-with-optout
Source: https://github.com/eugenelim/agent-ready-repo/tree/main/packages/agentbundle/tests/fixtures/creds/skills/dotfile-with-optout
Command: npx skills add https://github.com/eugenelim/agent-ready-repo --skill dotfile-with-optout

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill documents a legitimate credentialed primitive that reads a protected local credentials file while remaining acceptable to lint and review gates, so approved exceptions do not get flagged as suspicious.

Core Features & Use Cases

  • Credentialed file access: Shows how a primitive can read a local credential file for valid runtime use.
  • Same-line opt-out marker: Demonstrates the exact annotation pattern needed to keep the linter silent.
  • Security-aware fixture behavior: Reinforces that secrets stay local, are never echoed, and are never moved onto the command line.
  • Use case: Use it as a test fixture when validating review rules for credential-handling code paths that need an explicit exception.

Quick Start

Use this skill to verify that a credentialed primitive reading ~/.agentbundle/credentials.env is accepted only when the opt-out marker sits on the same line as the credentialed-primitive annotation.

Frequently Asked Questions about dotfile-with-optout

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I read local credentials without triggering lint failures?

To read local credentials without triggering lint failures, use a same-line opt-out annotation next to the credentialed-primitive marker so the linter recognizes the approved exception and stays silent.

What is a same-line opt-out marker for credential file access?

A same-line opt-out marker is an annotation placed directly on the same line as the credentialed-primitive statement, telling the linter to accept local dotfile access as a legitimate review exception.

How do I safely use credential fixtures in Python test bundles?

To safely use credential fixtures in Python test bundles, read protected dotfiles locally without printing secrets, passing tokens on the command line, or exfiltrating credentials, ensuring security-aware fixture behavior.

Does reading a protected dotfile work without a linter opt-out exception?

Reading a protected dotfile typically fails review checks without a linter opt-out exception, because accessing local credential files is flagged as suspicious unless a same-line opt-out annotation is present.

Why are my credentialed primitives flagged as suspicious during PR review?

Credentialed primitives are flagged as suspicious during PR review when the opt-out marker is missing from the same line as the credentialed-primitive annotation, preventing the linter from recognizing the approved exception.

When should I not use a local credentials file for runtime access?

You should not use a local credentials file for runtime access if the operation involves printing secrets, passing tokens via the command line, or exfiltrating credentials, as these violate security-aware fixture behavior.