auto-login-assistant

# Auto Login Assistant

## Overview

Use this skill when the agent is navigating a website and progress is blocked by a login screen, expired session, or verification-code challenge. The skill provides a conservative workflow for sign-in assistance: detect the login wall, collect user-approved credentials, fill the form, and handle one-time codes with clear consent boundaries.

This skill is intentionally not a bypass tool. It should never attempt to break captchas, defeat anti-bot systems, or infer secrets the user did not explicitly provide.

## When To Use

Trigger this skill when any of the following are true:

- The page redirects to a login, sign-in, or session-expired screen.
- The user asks the agent to sign in to a website, mailbox, SaaS product, or admin console.
- A workflow such as reading email, sending mail, checking dashboards, or accessing settings is blocked by authentication.
- The user wants the agent to help retrieve or place a verification code after they approve the flow.

Do not use this skill for:

- Captcha solving, QR login bypass, hardware key prompts, payment approval, or biometric confirmation
- Guessing usernames, passwords, security questions, or backup codes
- Reading email or messages unless the user explicitly authorizes it for the current task

## Workflow

### 1. Confirm It Is A Login Barrier

First verify that the page is actually asking for authentication. Look for signals such as:

- URL patterns like `login`, `signin`, `auth`, `session-expired`, `verify`
- Password fields, OTP fields, or email/username inputs
- Buttons or headings such as "Sign in", "Log in", "Continue with email", "Enter code"

If the page is ambiguous, say so and ask the user whether you should treat it as a login flow before entering any credentials.

### 2. Choose Credential Source

Credential priority order:

1. Credentials the user provides in the current conversation
2. A local file path the user explicitly points to
3. Environment variables the user ex...