We split this skill into the rules it gives an agent

7 rules. About 0 are common, 5 are distinctive, and 2 are very specific to this project.

• ≈0

  Common · estimate

  Many files like this have a rule of this kind.

• ≈5

  Distinctive · estimate

  This author's own choices. Worth a look.

• 2

  Very specific

  Tied to their project's names, files or tools. Probably skip.

• Common
• Distinctive
• Very specific

1. Distinctive:

   Use this skill for ordinary email/password forms.

   line 15
2. Very specific:

   Use get_page_snapshot to identify email/username, password, remember-me, and submit controls.

   line 29
3. Distinctive:

   If a TOTP field appears, ask the user for the current code unless one was already provided.

   line 34
4. Very specific:

   Use take_screenshot after login only if evidence is needed and it will not expose private account data.

   line 37
5. Distinctive:

   Never log or return passwords, TOTP codes, cookies, or auth headers.

   line 48
6. Distinctive:

   Never persist credentials in artifacts.

   line 49
7. Distinctive:

   Never attempt to bypass CAPTCHA, SSO, passkeys, or account recovery controls.

   line 50

≈ “Common” is an estimate: at least 1 in 5 of the 350,495 skill files we read have a rule of the same kind, not the same words. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.