setup-credentials
Facilitates secure credential setup for agents, detecting missing credentials and offering authentication options for seamless integration.
Install this skill
Security score
The setup-credentials skill was audited on Feb 12, 2026 and we found 20 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Access to hidden dotfiles in home directory
| 3 | description: Set up and install credentials for an agent. Detects missing credentials from agent config, collects them from the user, and stores them securely in the encrypted credential store at ~/.h |
Access to hidden dotfiles in home directory
| 53 | # Use encrypted storage (default: ~/.hive/credentials) |
Access to hidden dotfiles in home directory
| 186 | Also save to `~/.hive/configuration.json` for the framework: |
Access to hidden dotfiles in home directory
| 212 | # - Creates encrypted local storage at ~/.hive/credentials |
Access to hidden dotfiles in home directory
| 300 | (This will be stored securely in ~/.hive/credentials) |
Access to hidden dotfiles in home directory
| 366 | - Pre-populate ~/.hive/credentials programmatically |
Access to hidden dotfiles in home directory
| 374 | Track which auth method was used for each credential in `~/.hive/configuration.json`: |
Access to hidden dotfiles in home directory
| 430 | - The user MUST persist this key (e.g., in `~/.bashrc` or a secrets manager) |
Access to hidden dotfiles in home directory
| 432 | - This is the ONLY secret that should live in `~/.bashrc` or environment config |
Access to hidden dotfiles in home directory
| 438 | 3. Recommend adding it to `~/.bashrc` or their shell profile |
Access to hidden dotfiles in home directory
| 446 | - **ALWAYS** use the encrypted credential store (`~/.hive/credentials`) for persistence |
Access to hidden dotfiles in home directory
| 449 | - When modifying `~/.bashrc` or `~/.zshrc`, confirm with the user first |
Access to hidden dotfiles in home directory
| 556 | Agent: Would you like me to save this to your shell config (~/.zshrc) for future sessions? |
Access to hidden dotfiles in home directory
| 559 | [Saves to ~/.zshrc and ~/.hive/configuration.json] |
Access to .env file
| 488 | - **CredentialManager** only reads from environment variables and .env files (no encryption, no refresh) |
External URL reference
| 150 | url = get_aden_setup_url() # https://integration.adenhq.com/setup |
External URL reference
| 197 | "api_url": "https://api.adenhq.com" |
External URL reference
| 216 | base_url="https://api.adenhq.com", |
External URL reference
| 227 | print("Please visit https://integration.adenhq.com to connect HubSpot, then try again.") |
External URL reference
| 242 | base_url="https://api.adenhq.com", |