4 ms·
one thing that I am missing from the specification is a way to inject specific variables into the skills. If I create let's say a postgres-skill, then I can eit
by jonrosner 9mo ago
one thing that I am missing from the specification is a way to inject specific variables into the skills. If I create let's say a postgres-skill, then I can either (1) provide the password on every skill execution or (2) hardcode the password into my script. To make this really useful there needs to be some kind of secret storage that the agent can read/write. This would also allow me as a programmer to sell the skills that I create more easily to customers.
- j_bum 9mo agoI have no clue how you’re running your agents or what you’re building, but giving the raw password string to a the model seems dubious? Otherwise, why not just keep the password in an .env file, and state “grab the password from the .env file” in your Postgres skill?
- jonrosner 9mo agoI am thinking of distributing skills that I build to my clients. As my clients are mostly non-technical users I need this process of distribution to be as easy as possible. Even adding a .env file would probably be too much for most of them. With skills I can now finally distribute my logic easily, just send the raw files and tell them to put it into a folder - done. But there is no easy way for them to "setup" the credentials in those skills yet. The best UX in my opinion would be for Codex (or Claude, doesn't matter) to ask for those setup-parameters once when first using the skill and process the inputs in a secure manner, i.e. some internal secret storage
- JamesSwift 9mo agoThat’s exactly what I do.
- bavell 9mo ago> there needs to be some kind of secret storage that the agent can read/write Why not the filesystem? I would create a local file (e.g. .env) in each project using postgres, then in my postgres skill, tell the agent to check that file for credentials.