跳到正文
cccskills
免费在 GitHub 公开

secret-drop

Request a new API key or login through a single-use, expiring link. The submitted credential is encrypted and saved to the person's keychain, keeping secrets out of chat and making them available to the task.

中文简介正在准备中。当前显示英语简介。

原文查看原文说明

Request a credential nobody has saved yet (an API key, a site login) with a one-time, expiring link that saves it to the person's keychain. Use instead of asking for secrets in chat or sending people to the keychain page.

查看安装方法

适用场景

  • Collecting an API key that has not been saved
  • Requesting an email and password through a form
  • Creating a credential submission link for a teammate
  • Replacing an expired credential submission link

包含的文件(1)

  • SKILL.md2.1 KB

SKILL.md(原文)

安装前可以查看交给 AI 代理的指令内容。

Secret drop: request a new credential by link

Use this when a task needs a credential nobody has saved yet. Never ask for a secret in chat, and never tell the person to add it on the keychain page by hand.

  • A teammate's credential that is already saved: use the request-access skill instead.
  • A CLI with a device-code or browser login (gh, aws sso, gcloud): use interactive-login.

Mint the link

Only on a turn a person sent. Scheduled and trigger-fired turns are refused.

curl -fsS -X POST "$AGENT_API_URL/v1/keychain/drops" \
  -H "x-agent-capability: $AGENT_API_TOKEN" -H 'content-type: application/json' \
  -d '{"service":"acme","purpose":"sign in to the Acme dashboard","fields":[{"key":"ACME_EMAIL","label":"Email","secret":false},{"key":"ACME_PASSWORD","label":"Password"}]}'
  • service names the credential; purpose is one plain sentence the person sees on the form.
  • fields declares the form inputs (1–8). Keys are env var names; secret:false shows the input in clear text (usernames, emails). For a single token, omit fields and pass "envKey":"ACME_API_KEY" instead.
  • The link belongs to the person whose turn this is. If a different teammate in this conversation will fill it, add "onBehalfOf":"<their id>".
  • Send the header exactly as shown. Authorization: Bearer is not accepted.

The response is {dropId, url}. Give the person url exactly as returned. It carries a link-bound token, so a rebuilt URL will not work.

Then

  • Tell them in one line what the link is for. It works once and expires.
  • Stop. Don't poll.
  • When they submit, the value is saved encrypted to their keychain (and, in a channel or group, granted to this conversation) and this conversation wakes with the new credential's handle. Select that handle in execute.credentials to get the declared env vars.
  • If the link expires or they used the wrong account, mint a fresh one.

评价

还没有评价。欢迎分享你的使用感受。

评论

无需登录即可发表。欢迎分享使用感受、提问,或说明在哪些环境下无法运行。

还没有评论。来写第一条吧。

提交后会立即公开。请勿填写邮箱、电话等个人信息。URL 最多 2 个。

0 / 1000 字

此表单受 reCAPTCHA 保护,适用 Google 的隐私权政策和服务条款。

同一仓库的技能

admin

免费

Help QM organization admins inspect settings, stored memory, conversations, files, and operational records across the organization. It also supports confirmed configuration changes and external user management, while keeping admin grant changes in the dashboard.

中文简介正在准备中。当前显示英语简介。

  • Check whether the requester is an organization admin
  • Inspect or update organization and channel settings
  • Investigate agent behavior using transcripts and captured prompts
yc-software/qm1.5万2026年10月19日 更新

browse

免费

Carry out website tasks in a remote browser, including expense submissions, authorized orders, and retrieving data behind a login. Personal browser profiles preserve sign-ins, while users handle login and verification screens themselves.

中文简介正在准备中。当前显示英语简介。

  • Submit an expense with a receipt attachment
  • Order food within an agreed budget
  • Retrieve data from a signed-in website
yc-software/qm1.5万2026年10月19日 更新

cloud-cli

免费

Sign in to a cloud provider’s command-line tool using a verification URL and one-time code approved on the user’s device. Check installation and account identity, save the login, and run commands within that user’s permissions.

中文简介正在准备中。当前显示英语简介。

  • Sign in to a cloud CLI from a separate device
  • Check whether required CLIs and helpers are installed
  • Verify the cloud account before running commands
yc-software/qm1.5万2026年10月19日 更新

composio

免费

Help users discover and connect apps, then run available app tools through QM’s authenticated backend. It checks connection status, presents consent options, and keeps Composio project keys out of user-facing setup.

中文简介正在准备中。当前显示英语简介。

  • Browse available app integrations
  • Connect an app needed for a task
  • Reopen app connection setup
yc-software/qm1.5万2026年10月19日 更新

Connect supported work apps through browser consent without sharing passwords with the agent. The skill checks available connection methods, provides a single-use authorization link when appropriate, and guides personal Slack account linking.

中文简介正在准备中。当前显示英语简介。

  • Connect an administrator-enabled work app
  • Authorize an app through a browser consent link
  • Link a personal Slack account
yc-software/qm1.5万2026年10月19日 更新

Set up recurring agent work for issues, tickets, or small fixes. The skill tests one real item first, then defines a repeatable procedure, tracks work to prevent duplicates, and holds outputs for human review.

中文简介正在准备中。当前显示英语简介。

  • Recurring preparation of fixes for Sentry issues
  • Drafting replies to Front tickets
  • Preparing small performance improvement PRs
yc-software/qm1.5万2026年10月19日 更新

查看 yc-software 的全部技能

报告此技能的问题