connect-tool SKILL.md skillF
connect-tool from servosity/msp-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add servosity/msp-skills/connect-tool@git:20260820.d230e0bPins git:20260820.d230e0b in mdr.lock. Pin the fingerprint instead.
- Audit grade
- F, 15 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- servosity/msp-skills
- Path
skills/connect-tool/SKILL.md- Versions recorded
- 5
- Latest version
- git:20260820.d230e0b, committed Aug 20, 2026
- First version recorded
- Jul 23, 2026
- Size
- 11,028 bytes
- Repository stars
- 70
- License
- a license file GitHub does not identify
Set up and PROVE authentication for any CLI, MCP server, or Skill by driving your ALREADY-OPEN, logged-in Chrome via the OpenCLI browser bridge (opencli browser bind): your real session, supervised live, never a fresh or headless Chromium. Reconciles to a desired auth state, so it works even when a tool is already connected: first-time setup, token refresh, broadening scopes, key rotation, and repair. Runs on macOS and Windows, storing every secret in the macOS Keychain or Windows Credential…
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# connect-tool - browser-driven auth lifecycle manager Drives your real, logged-in Chrome (via OpenCLI) to set up / refresh / broaden / repair auth for any CLI, MCP server, or Skill; stores secrets in the OS credential store **without the complete value ever entering this context**; and does not stop until a real authenticated call returns live data. **Runs on macOS and Windows.** ## 0. Running the helpers (read before your first command) Every helper is a Python script next to this file, run the same way on both platforms: ``` uv run <this-skill-dir>/scripts/<helper>.py [args] ``` `<this-skill-dir>` is the directory containing this SKILL.md, which you already know because you just read it. Use that path directly. Do NOT search the filesystem for it and do NOT hardcode `~/.claude/skills/connect-tool`: a plugin install lands somewhere else, and any shell-search snippet breaks under the PowerShell tool on Windows. `uv` supplies its own Python, so nothing else needs installing to run these. If `uv` is absent but Python 3.12+ is present, `python3 <script>` (`python` on Windows) also works. There is no bash in these instructions on purpose. On native Windows without Git for …
Read the whole file at its exact version.
How to install
mdr add servosity/msp-skills/connect-tool@sha256:977ea5d1785da0acThe line at the top of this page pins the label git:20260820.d230e0b, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_sxpuwlzfocxjeqkf)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 5 versions of this file, between Jul 23, 2026 and Aug 20, 2026, about one every 7 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260820.d230e0b latest | 2026-08-20 | d230e0b | 11,028 B | F | view · diff |
| git:20260723.a2446aa | 2026-07-23 | a2446aa | 9,932 B | F | view · diff |
| git:20260723.1206574 | 2026-07-23 | 1206574 | 9,620 B | F | view · diff |
| git:20260723.44b5c6f | 2026-07-23 | 44b5c6f | 8,374 B | F | view · diff |
| git:20260723.4acbb68 | 2026-07-23 | 4acbb68 | 8,273 B | F | view |
Audit of the latest version
- FAIL, critical: No instruction to send local credentials anywhere (matched: upload|wait` (crib: `references/browser-and-keychain)
- fail: No script tag (matched: <script)
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (11028 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
Starting a new one? Use a template for SKILL.md on mdpantry, which passes every one of these checks and says what to change in it.
Source
servosity/msp-skills · 70 stars · license a license file GitHub does not identify · pushed 2026-11-05 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_sxpuwlzfocxjeqkf GET https://markdownregistry.com/api/v1/resolve?ref=servosity/msp-skills/connect-tool GET https://markdownregistry.com/api/v1/blob/977ea5d1785da0ac94bcdd1c38b1ae1cbe688d1872e4ca1c84d152ded2716656
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from servosity/msp-skills
Every file in servosity/msp-skills