stephengpope/agent-job-secrets
templates/skills-library/agent-job-secrets/SKILL.md
Use to list or retrieve agent job secrets, API keys, and OAuth credentials (auto-refreshed). Trigger when the user mentions a secret/credential by name, or asks "what secrets are available", "get the X token", "fetch the Y API key", or when a previously-fetched credential stops working and needs to be re-fetched.
$ install --global
skillsauthnpx skillsauth add stephengpope/thepopebot agent-job-secretsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 7, 2026, 7:48 AM6.6s1 file scanned
SKILL.md
- name:
- agent-job-secrets
- description:
- Use to list or retrieve agent job secrets, API keys, and OAuth credentials (auto-refreshed). Trigger when the user mentions a secret/credential by name, or asks "what secrets are available", "get the X token", "fetch the Y API key", or when a previously-fetched credential stops working and needs to be re-fetched.
Usage
# List available secret keys (fetches current list from server)
node skills/agent-job-secrets/agent-job-secrets.js list
# Get a secret value (OAuth credentials are auto-refreshed)
node skills/agent-job-secrets/agent-job-secrets.js get MY_CREDENTIALS
Notes
AGENT_JOB_TOKENandAPP_URLare injected automatically — no setup required.- Plain (non-OAuth) secrets are also available directly as env vars (e.g.
echo $MY_KEY). - OAuth credentials must be fetched via
get— they are not available as env vars. geton an OAuth credential refreshes it server-side and returns a fresh access token.- If a fetched credential stops working (expired token, 401 error), call
getagain to obtain a fresh one. listalways fetches from the server, so it reflects secrets added after the container started.
Related Skills
stephengpope/playwright-cli
tools
VerifiedTrustedCommunity
Automate browser interactions, test web pages and work with Playwright tests.
1,766SKILL.mdUpdated May 7, 2026
stephengpope/agent-job-dm
testing
VerifiedTrustedCommunity
Send a direct message to a user OR broadcast to all subscribed admins via their default channel (currently Telegram). Also looks up users when a specific person is named. Trigger when the user says "let me know when…", "DM me", "send X to <name>", "tell <name> that…", "notify the admins", "alert everyone", "broadcast this", "let the team know", "tell all admins", or asks "who are the users?", "list users".
1,766SKILL.mdUpdated May 7, 2026
stephengpope/agent-job-background
testing
VerifiedTrustedCommunity
Use to spawn or check on long-running background agent jobs (each launches a new Docker agent container that opens a PR when done). Trigger when the user says "create a background job", "spawn an agent", "kick off a job", "run this in the background", "check job status", or asks "what's the status of job <id>".
1,766SKILL.mdUpdated May 7, 2026
stephengpope/agent-job-dm
testing
VerifiedTrustedCommunity
Send a direct message to a user OR broadcast to all subscribed admins via their default channel (currently Telegram). Also looks up users when a specific person is named. Trigger when the user says "let me know when…", "DM me", "send X to <name>", "tell <name> that…", "notify the admins", "alert everyone", "broadcast this", "let the team know", "tell all admins", or asks "who are the users?", "list users".
1,750SKILL.mdUpdated Apr 29, 2026