Nm Leyline Authentication Patterns

Authentication patterns for external services: API keys, OAuth, token management, verification. authentication, API keys, OAuth, token management, credentials.

This is a documentation-only skill that outlines patterns for API keys, OAuth, token refresh, and an interactive shell helper that caches tokens locally. Before installing or using it: 1) Understand it expects and may prompt you to enter sensitive credentials (GitHub/GitLab/AWS/GCP tokens) and will cache them under ~/.cache/claude-auth or standard CLI config paths — use ephemeral tokens where possible and inspect/delete caches after use. 2) It runs local CLIs (gh, glab, aws, gcloud and arbitrary binaries named by a 'service' parameter) — ensure those CLIs are trusted and present; malicious or misconfigured binaries with the same name could be invoked. 3) The skill references a script path to source (plugins/leyline/scripts/interactive_auth.sh) that is not included here; review or provide the actual script before sourcing. 4) In CI use secrets management (GitHub Actions secrets, etc.) rather than interactive credential entry. If you need higher assurance, ask the author for the interactive_auth.sh script and for explicit explanation of the declared config path (night-market.error-patterns) and confirm where on disk tokens are stored and how they are secured/rotated.

Type: OpenClaw Skill Name: nm-leyline-authentication-patterns Version: 1.0.0 The skill bundle provides a comprehensive set of patterns and utilities for managing authentication with external services like GitHub, GitLab, and AWS. It includes documentation and code snippets for API key verification, OAuth flows, token caching, and session management. The functionality is clearly aligned with its stated purpose of credential management, using standard CLI tools (gh, glab, aws) and local caching (e.g., ~/.cache/claude-auth), with no evidence of malicious intent or data exfiltration.