environments

82 / 100 · Low risk

Fine to try. Some of what it can do is expected: a data skill usually connects to databases or online services with your credentials.

By phuryn/product-engineering (GitHub) · data · 427 stars · scanned at commit 061014f

Adding a variable or secret, 'set up production', a domain or a provider token, 'which database is this', a leaked key: dev and production for an AI-built app, backups, incidents.

Works with any agent that supports SKILL.md skills.

What this skill can do

Downloads and installs other software

The author does not mention this.

Found in 2 places.

app-stack/skills/environments/references/domain-and-provider-access.md, line 11- **An identity provider's CLI session reaches the whole account too.** Clerk's (`npx clerk auth login`) picks any application in the account with `--app` ([Cle
app-stack/skills/environments/references/domain-and-provider-access.md, line 12- **Supabase has scoped personal access tokens** ([Supabase](https://supabase.com/docs/guides/platform/personal-access-tokens); generally available `2026-10-06`

Connects to the internet

This is disclosed by the author in the skill's SKILL.md or README. Expected for a data skill.

Found in 1 place.

app-stack/skills/environments/references/domain-and-provider-access.md, line 40- **A proxied hostname can get the zone's own `robots.txt`** (a DNS-only host, Netlify included, serves the origin's file untouched, because its traffic never p

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'environments' ] || [ -L ~/.agents/skills/'environments' ]; then echo 'A skill folder named environments already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/phuryn/product-engineering' "$d" && git -C "$d" checkout --quiet '061014ffe954b4dca1f108de614ce25e4607161e' -- 'app-stack/skills/environments' && mkdir -p ~/.agents/skills && cp -R "$d"/'app-stack/skills/environments' ~/.agents/skills/'environments' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'environments' ~/.claude/skills/'environments' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for phuryn/product-engineering shows the score of its lowest-scoring skill.

SkillTrust badge for phuryn/product-engineering

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/phuryn/product-engineering.svg)](https://zalavijaysinh.github.io/skilltrust/repos/phuryn/product-engineering/)

Score history

Date	Version	Score
2026-11-10	`061014f`	82