用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt；运行前请先检查来源。
npx skills add https://github.com/pymc-labs/daimon --skill cli-auth命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地？可下载 SkillsMP 当前能够提供的文件。
正在显示 SKILL.md
| name | cli-auth |
| description | Obtain CLI access tokens via the daimon MCP server's get_cli_token tool. |
Use the daimon MCP server's get_cli_token(service) tool to obtain access
tokens for external CLIs. Export the result under the appropriate name
before running CLI commands.
| Service | Tool call | Name to export |
|---|---|---|
| GitHub | get_cli_token("github") | GH_TOKEN (or GITHUB_TOKEN) |
| Google Cloud / Workspace | get_cli_token("gcloud") | CLOUDSDK_AUTH_ACCESS_TOKEN |
Call the MCP tool first, then pass its result privately to the shell process
environment before running a command such as gh repo list.
get_cli_token is an MCP tool, not a shell command.
The tool requires:
github: the caller must already have a matching GitHub token binding.
An account-only call reads the account's token; an agent-bound call reads
that agent's token. Ordinary chat currently uses account-only identity, so
request_repo_binding saving a target agent's token does not make it
available to this tool. A GitHub App installation alone does not supply it
either. If access is missing, ask the operator to configure CLI token access
for the calling identity; do not repeatedly ask the person to bind the repo.gcloud: the operator must configure deployment Google access and bind
the agent to a Google identity with daimon agents bind-google <agent> <email> --scopes <scope>, repeating --scopes for additional scopes.
Tokens are short-lived (≈1 hour) impersonated access tokens.
The call also needs an agent-bound identity, which ordinary chat does not
currently provide. Binding the Google identity alone cannot fix a missing
caller agent_id; hand that limitation to the operator.Each call resolves access afresh. GitHub returns the stored personal token; Google mints a short-lived impersonated token. Never print either value.
First-time workspace setup and agent-roster operations for a Daimon workspace — working repo, keys, skills, MCP servers, routines, and which changes need an admin.
Use when the user asks about team context, project status, decisions, or discussions that live in Slack or Discord, or names a daimon. Routes the question to the right daimon servers and merges their answers.
Publish a finished report as a page a named set of people can read and ask questions about. Covers gathering recipients and a cap, building the one archive the reading room expects, the size discipline for a large bundle, and the mint-then-upload-then-share procedure. Use when someone wants to hand a finished report to specific people, not for sharing a notebook or a chart in the thread.