secure-fill SKILL.md skillA
secure-fill from jeongjaesoon/agent-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add jeongjaesoon/agent-skills/secure-fill@git:20261026.46adf36Pins git:20261026.46adf36 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- jeongjaesoon/agent-skills
- Path
skills/secure-fill/SKILL.md- Versions recorded
- 4
- Latest version
- git:20261026.46adf36, committed Oct 26, 2026
- First version recorded
- Sep 26, 2026
- Size
- 10,395 bytes
- Repository stars
- 3
- License
- MIT
Use when a browser auth screen needs a secret (dev token, test password) the agent must not see — "토큰 입력해줘", "비밀번호 칸 채워줘", "secure-fill". The value goes from the Keychain to the page after the owner's Touch ID. Never read, echo or paste the secret, and never edit the allowlist.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Secure fill
비밀번호 관리자와 같은 방식이다. 에이전트는 채우기를 요청만 하고, 사람은 에이전트가 조작할 수 없는 창(Touch ID / 기기 소유자 인증)에서 매번 승인하고, 값은 도구가 브라우저에 직접 넣는다. 소유자가 허용 목록에서 `"approval": "none"`으로 둔 항목은 승인 창 없이 채운다. 값은 argv, 표준 출력, 로그 어디에도 나오지 않는다.
## 에이전트가 할 일
1. 브라우저에서 인증 화면으로 이동한다.
2. 값을 넣을 입력칸을 클릭해 포커스를 준다.
3. 실행한다.
```bash
python3 "${CLAUDE_SKILL_DIR}/scripts/secure_fill.py" --item <이름> --origin https://dev.example.test --target chrome # 또는 --target orca
```
`bin/secure-fill`은 같은 일을 하는 래퍼다. 소유자가 `chmod 755 bin/secure-fill`을 해 두면 PATH에서 `secure-fill`로 부를 수 있다.
4. 사람에게 "Touch ID 승인 대기 중"이라고 알린다. 승인할 때까지 명령이 끝나지 않는다. `"approval": "none"` 항목은 기다리지 않고 바로 끝난다.
결과는 한 줄로 나오고 종료 코드로도 구분된다. 값은 나오지 않는다.
| 종료 코드 | 결과 | 다음 행동 |
|---|---|---|
| 0 | `filled` | 폼 제출은 사람이나 에이전트가 한다(`--submit`을 줬을 때만 도구가 제출) |
| 10 | `denied` | 사람이 거절했다. 다시 시도하기 전에 묻는다 |
| 11 | `origin-mismatch` | 활성 탭이 `--origin`과 다르다. 이동부터 한다 |
| 12 | `not-found` | Keychain에도 env에도 값이 없다. 사람에게 등록을 부탁한다 |
| 13 | `not-allowed` | 허용 목록에 그 item·origin 쌍이 없다. 사람에게 부탁한다 |
| 14 | `no-field` | 포커스된 입력칸이 없다 |
| 15 | `fill-failed` | 권한 부족 등. 이유가 괄호 안에 나온다 |
| 16 | `config-error` | 허용 목록 형식 오류 |
…Read the whole file at its exact version.
How to install
mdr add jeongjaesoon/agent-skills/secure-fill@sha256:c621de147b15fe1bThe line at the top of this page pins the label git:20261026.46adf36, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_sh537ok5xecvxvp4)
0 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 4 versions of this file, between Sep 26, 2026 and Oct 26, 2026, about one every 10 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261026.46adf36 latest | 2026-10-26 | 46adf36 | 10,395 B | A | view · diff |
| git:20261012.14c3b4f | 2026-10-12 | 14c3b4f | 10,487 B | A | view · diff |
| git:20260926.bc0e5c7 | 2026-09-26 | bc0e5c7 | 10,705 B | A | view · diff |
| git:20260926.39bb628 | 2026-09-26 | 39bb628 | 9,431 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (10395 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
jeongjaesoon/agent-skills · 3 stars · license MIT · pushed 2026-11-04 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_sh537ok5xecvxvp4 GET https://markdownregistry.com/api/v1/resolve?ref=jeongjaesoon/agent-skills/secure-fill GET https://markdownregistry.com/api/v1/blob/c621de147b15fe1b4f8dadcb69e171baae28dea8880f595eec57e1a1b236121a
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.