Agent-Reach: throwaway account, least privilege, scan before install

The Stack

Steps

1. 1

   Author the preflight manifest and validate the guardrails

   Write agent-reach.preflight.yaml: account_mode throwaway, a list of platforms each marked token or cookie auth, cookie_auth_acknowledged true if any platform uses cookies, and scan_before_install true. CI rejects a main account, an unacknowledged cookie platform, or a missing scan flag. Running the install is fenced.

   cat > agent-reach.preflight.yaml <<'YAML'
   account_mode: throwaway
   scan_before_install: true
   cookie_auth_acknowledged: true
   platforms:
     - { name: github, auth: token }
     - { name: youtube, auth: token }
     - { name: twitter, auth: cookie }
     - { name: reddit, auth: cookie }
   YAML
   ruby -ryaml -e '
   c = YAML.safe_load(File.read("agent-reach.preflight.yaml")) || {}
   abort "BAD: account_mode must be throwaway, never main" unless c["account_mode"] == "throwaway"
   abort "BAD: scan_before_install must be true" unless c["scan_before_install"] == true
   platforms = c["platforms"] || []
   abort "BAD: list at least one platform" unless platforms.is_a?(Array) && !platforms.empty?
   cookie = platforms.select { |p| p["auth"] == "cookie" }
   if !cookie.empty? && c["cookie_auth_acknowledged"] != true
     abort "BAD: cookie platforms present, set cookie_auth_acknowledged: true"
   end
   puts "preflight OK: throwaway account, " + cookie.length.to_s + " cookie platform(s) acknowledged, pre-install scan required"
   '

2. 2

   Scan, then install on the throwaway (fenced)

   Run skillspector on the Agent-Reach repo, then follow its install on a throwaway account, never your main, since cookie auth carries a ban risk. The scan and install need the tools and credentials and are fenced; CI only proves your guardrails hold.