dotfile-with-optout

Validate credentialed primitives reading protected dotfiles with same-line opt-out annotations.

15|5|Updated May 4, 2026
One-click install
npx skills add https://github.com/eugenelim/agent-ready-repo --skill dotfile-with-optout
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: dotfile-with-optout
Source: https://github.com/eugenelim/agent-ready-repo/tree/main/packages/agentbundle/tests/fixtures/creds/skills/dotfile-with-optout
Command: npx skills add https://github.com/eugenelim/agent-ready-repo --skill dotfile-with-optout

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill documents a legitimate credentialed primitive that reads a protected local credentials file while remaining acceptable to lint and review gates, so approved exceptions do not get flagged as suspicious.

Core Features & Use Cases

  • Credentialed file access: Shows how a primitive can read a local credential file for valid runtime use.
  • Same-line opt-out marker: Demonstrates the exact annotation pattern needed to keep the linter silent.
  • Security-aware fixture behavior: Reinforces that secrets stay local, are never echoed, and are never moved onto the command line.
  • Use case: Use it as a test fixture when validating review rules for credential-handling code paths that need an explicit exception.

Quick Start

Use this skill to verify that a credentialed primitive reading ~/.agentbundle/credentials.env is accepted only when the opt-out marker sits on the same line as the credentialed-primitive annotation.

Frequently Asked Questions about dotfile-with-optout

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I read local credentials without triggering lint failures?▼

To read local credentials without triggering lint failures, use a same-line opt-out annotation next to the credentialed-primitive marker so the linter recognizes the approved exception and stays silent.

What is a same-line opt-out marker for credential file access?▼

A same-line opt-out marker is an annotation placed directly on the same line as the credentialed-primitive statement, telling the linter to accept local dotfile access as a legitimate review exception.

How do I safely use credential fixtures in Python test bundles?▼

To safely use credential fixtures in Python test bundles, read protected dotfiles locally without printing secrets, passing tokens on the command line, or exfiltrating credentials, ensuring security-aware fixture behavior.

Does reading a protected dotfile work without a linter opt-out exception?▼

Reading a protected dotfile typically fails review checks without a linter opt-out exception, because accessing local credential files is flagged as suspicious unless a same-line opt-out annotation is present.

Why are my credentialed primitives flagged as suspicious during PR review?▼

Credentialed primitives are flagged as suspicious during PR review when the opt-out marker is missing from the same line as the credentialed-primitive annotation, preventing the linter from recognizing the approved exception.

When should I not use a local credentials file for runtime access?▼

You should not use a local credentials file for runtime access if the operation involves printing secrets, passing tokens via the command line, or exfiltrating credentials, as these violate security-aware fixture behavior.