
Codia Design Skills
- 20 installs
- Updated July 26, 2026
- codia-ai/codia-design-skills
Generate UI designs and design system components
About
Codia AI generates UI designs, components, and design system elements. Creates design assets.
- UI design generation
- Component creation
Codia Design Skills by the numbers
- 20 all-time installs (skills.sh)
- Ranked #1,376 of 1,880 Design & UI/UX skills by installs in the Skillselion catalog
- Data as of Jul 29, 2026 (Skillselion catalog sync)
npx skills add https://github.com/codia-ai/codia-design-skills --skill codia-design-skillsAdd your badge
Show developers this skill is listed on Skillselion. Paste this into your README.
| Installs | 20 |
|---|---|
| Last updated | July 26, 2026 |
| Repository | codia-ai/codia-design-skills ↗ |
What it does
Generate UI designs and design system components
Files
Codia Design Skills
This is the root router skill for the Codia Design Skills pack. In the normal npx skills add install flow, agents load this top-level skill first. The feature and workflow skills under skills/ are supporting instructions that this router reads when the request needs a specific capability.
Use Codia through the local codia-design CLI. The CLI performs authenticated requests to Codia Open API and writes local downloads when commands return files.
Runtime Setup
Before running a Codia command, check whether the CLI is available.
macOS / Linux:
command -v codia-designWindows PowerShell:
Get-Command codia-design -ErrorAction SilentlyContinueIf codia-design is missing and the user allows global npm installs, install the runtime:
npm install -g @codia-ai/codia-design-cliThen verify:
codia-design --help
codia-design auth statusIf global npm install is blocked, tell the user to run the same install command manually, then continue after they confirm it is installed.
Authentication
Check auth before billable work:
codia-design auth statusIf disconnected, prefer browser login:
codia-design auth login --platform codexIf browser login is unavailable and the user provides an API key, bind it without echoing the value:
codia-design auth set --api-key api_key_xxxThe CLI stores auth state in ~/.codia/design-skills/config.json. Never print this file or API keys.
Routing Rules
Read the matching child skill before running commands that need parameters, model choices, polling behavior, or multi-step sequencing. Resolve paths relative to this root SKILL.md.
| User intent | Read |
|---|---|
| Broad Codia setup, auth, account checks, or fallback routing | skills/codia-design/SKILL.md |
| Product launch packs, ecommerce listing assets, marketplace visuals | skills/codia-product-assets/SKILL.md |
| Campaign posters, launch visuals, social creative sets, multi-size adaptations | skills/codia-campaign-assets/SKILL.md |
| PDF/report/document to editable design data, PPTX deck, or both | skills/codia-document-deck/SKILL.md |
| Text-to-image generation, posters, campaign visuals, backgrounds | skills/codia-image-generate/SKILL.md |
| Image-to-image generation from one or more references | skills/codia-image-image-to-image/SKILL.md |
| Controlled visual variations from an existing image | skills/codia-image-remix/SKILL.md |
| Reframe or adapt images to new aspect ratios | skills/codia-image-reframe/SKILL.md |
| Upscale or improve final image quality | skills/codia-image-upscale/SKILL.md |
| Remove image backgrounds or create transparent PNG cutouts | skills/codia-remove-bg/SKILL.md |
| Replace backgrounds with studio, lifestyle, or campaign scenes | skills/codia-image-replace-bg/SKILL.md |
| Erase unwanted objects, clutter, or defects from authorized images | skills/codia-image-object-erase/SKILL.md |
| Remove watermarks or overlays from authorized images | skills/codia-image-watermark-remove/SKILL.md |
| Describe, inspect, caption, or analyze an image | skills/codia-image-describe/SKILL.md |
| Convert screenshots, UI mockups, posters, or images into editable design data | skills/codia-image-to-design/SKILL.md |
| Convert images into Codia layering DSL | skills/codia-image-layering/SKILL.md |
| Convert selected PDF pages into editable design data | skills/codia-pdf-to-design/SKILL.md |
| Convert selected PDF pages into a downloadable PPTX deck | skills/codia-pdf-to-ppt/SKILL.md |
| Vectorize logos, icons, or images into SVG | skills/codia-svg/SKILL.md |
| Check credit balance | skills/codia-credits/SKILL.md |
| Inspect usage records and recent task costs | skills/codia-usage/SKILL.md |
| Read or update automatic recharge settings | skills/codia-auto-recharge/SKILL.md |
Prefer a workflow skill when the user asks for a real outcome with multiple deliverables. Prefer a feature skill when the request is a single clear operation.
Common Workflow Choices
Use skills/codia-product-assets/SKILL.md when the user wants a product or ecommerce deliverable such as a listing image set, product launch asset pack, store banner, white-background product tile, or lifestyle scene variants.
Use skills/codia-campaign-assets/SKILL.md when the user wants campaign or social creative, such as a poster plus adapted 1:1, 4:5, 9:16, banner, or thumbnail versions.
Use skills/codia-document-deck/SKILL.md when the user wants to turn PDFs, reports, screenshots, or existing design files into editable design data, a PPTX deck, or both.
Command Rules
- Prefer local file paths when the user provides local assets.
- Use
--outfor large JSON responses. - Use
--download-dir DIRwhen the user asks where outputs should go. - Use
--no-downloadonly when the user explicitly wants JSON-only behavior. - For PDFs, Codia page numbers are zero-based: page
0is the first page. - For
pdf-to-ppt, use the CLI polling/download flow and validate the returned PPTX. Do not rasterize the PDF locally or create a substitute deck unless the user explicitly asks for a local fallback. - For image generation, keep the first call simple when the user has not specified model or size. The CLI default is
seedream_5at2560x1440. - For watermark or object removal, proceed only when the image is user-owned or otherwise authorized.
Account And Cost Checks
The CLI uses the public Open API v2 surface (/v2/open/*) and estimates billable credit cost before paid operations. After a billable command, it may query credits and warn if the remaining balance is low. That warning should not block the requested work unless the API itself rejects the request.
Useful commands:
codia-design credits
codia-design usage --page 1 --page_size 20
codia-design limitsOutput Expectations
Report the concrete result: local output file paths, downloaded PPTX path, image files, returned URLs, task IDs, and any API error messages. Do not include secrets, raw auth config, or unnecessary full JSON when a compact summary is enough.
node_modules/
*.log
.DS_Store
.env
.env.*
dist/
outputs/
build/
coverage/
.cache/
.idea/
.vscode/
*.tgz
Codia Design Skills Agent Install
This file is written for Codex, Claude Code, Cursor, and other local coding agents. Read it, ask for the user's permission, then install Codia Design Skills.
Goal
Install:
- The
codia-designruntime CLI from npm. - The
codia-design-skillsroot agent skill pack from the public skill repository.
After installation, future agent sessions can call Codia Open API commands for design conversion, image generation/editing, SVG conversion, PDF-to-PPT, credits, usage, and related workflows.
Required Permission
Before running install commands, ask the user for permission to:
- Run
npm install -g @codia-ai/codia-design-cli. - Run
npx -y skills add https://github.com/codia-ai/codia-design-skills.git -g -yto install the skill globally. - Open a browser for
codia-design auth login --platform codexif authentication is needed.
If permission is denied, stop and provide the manual commands instead.
Safety Rules
- Do not print API keys.
- Do not print
~/.codia/design-skills/config.json. - Do not push git branches or modify unrelated project files.
- Ask the user for an API key only if no key is available in
CODIA_API_KEYandcodia-design auth statusreports disconnected.
Skill Source And Accounts
npx -y skills add https://github.com/codia-ai/codia-design-skills.git -g -y installs skill files from the public GitHub repository. It does not upload skills and does not require a separate skills.sh publisher account.
To share these skills with other users, maintainers provide a repository or local bundle that contains a root SKILL.md. This repository uses that root skill as a router and keeps workflow/feature instructions under skills/. The skills.sh directory can discover and rank skills automatically after users install them through the skills CLI. A skills.sh API key is only needed for catalog API queries, not for publishing or installing skills.
An npm account is only needed for publishing the separate runtime CLI package, such as @codia-ai/codia-design-cli.
Step 1: Check Prerequisites
Run:
node --version
npm --versionNode.js 20 or newer is required. If Node.js or npm is missing, tell the user to install Node.js 20+ first, then resume.
Step 2: Install Runtime CLI
Run:
npm install -g @codia-ai/codia-design-cli
codia-design --helpWindows PowerShell uses the same commands:
npm install -g @codia-ai/codia-design-cli
codia-design --helpIf global npm install is not allowed, use the runtime through npx:
npx -y @codia-ai/codia-design-cli --helpIf global npm install fails because of permissions, ask the user to run the same command manually.
Step 3: Install the Skill Pack
If this file is in the public GitHub skill repository, run:
npx -y skills add codia-ai/codia-design-skills -g -yIf the repository URL is known, this form is also valid:
npx -y skills add https://github.com/codia-ai/codia-design-skills.git -g -yIf npx skills is unavailable, stop and ask the user how they want to install local agent skills. The npm CLI package does not bundle skill files.
Do not pass --full-depth for normal installs. A normal install should create one top-level codia-design-skills skill pack.
Step 4: Verify Skill Installation
Run:
npx skills ls -gConfirm that codia-design-skills appears in the installed skill list.
One or more supported agent skill directories should contain the root pack and its nested feature files. Common locations include:
~/.agents/skills/codia-design-skills/SKILL.md
~/.agents/skills/codia-design-skills/skills/codia-image-generate/SKILL.md
~/.codex/skills/codia-design-skills/SKILL.md
~/.claude/skills/codia-design-skills/SKILL.md
~/.cursor/skills/codia-design-skills/SKILL.mdExact paths are agent-dependent; ~/.agents/skills is the standard unified local-agent location, while Codex commonly reads ~/.codex/skills. The root SKILL.md handles routing and reads nested files under skills/ when needed.
Step 5: Authenticate
First check whether the CLI is already connected:
codia-design auth statusIf it is connected, continue to verification.
If it is not connected, prefer the device login flow:
codia-design auth login --platform codexIf the user provides an API key through CODIA_API_KEY, bind it without printing the value:
codia-design auth set --api-key "$CODIA_API_KEY"If the user provides an API key directly in chat, do not echo it back. Run the auth command using the provided value only.
Step 6: Smoke Test
Run:
codia-design --help
codia-design auth statusIf authenticated, also run:
codia-design creditsReport the final status to the user. Do not include secrets or config file contents.
MIT License
Copyright (c) 2026 Codia AI
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.
Codia Design Skills
Codia Design Skills gives local AI agents a reliable way to call Codia Open API from normal project work. After installation, an agent can inspect screenshots, convert PDFs into design data, generate or edit images, remove backgrounds, create SVG assets, export PDFs to PPT, and check account usage through the local codia-design command.
This repository is for agent skills. The skill files teach Codex, Claude Code, Cursor, and other agents when to use Codia, which workflow to choose, and how to call the runtime safely. The runtime CLI is installed separately and performs the authenticated API requests on the user's machine.
You normally do not need to paste CLI commands into the agent. Ask for the outcome you want, provide local file paths or URLs, and let the agent pick the matching Codia skill.
Quick Start
Preferred (npx skills)
Install the Codia Design root skill pack from GitHub with npx skills:
npx -y skills add https://github.com/codia-ai/codia-design-skills.git -g -yThe default install creates one top-level codia-design-skills skill. Workflow and feature instructions live inside the pack under:
SKILL.md
skills/<workflow-or-feature>/SKILL.mdThe root skill handles routing and reads the relevant child SKILL.md file when a task needs specific parameters, model choices, or multi-step sequencing. Do not use --full-depth for normal installs unless you intentionally want every child skill installed as a separate top-level skill.
For a hands-off setup flow, give AGENT_INSTALL.md to your agent and ask it to install Codia Design Skills.
Use In An Agent
After installing the skill pack, start a new agent session or ask the agent to reload skills. Then describe the task in normal language. The agent will load the codia-design-skills root router, choose the right child workflow or feature instructions, check whether the codia-design CLI is installed, verify authentication, run the needed command, and report local output files or returned URLs.
Example agent requests:
Use Codia to convert ./screenshot.png into editable design JSON and save it under ./outputs.
Use Codia to convert pages 0-4 of ./proposal.pdf into a PPT and also extract editable design data.
Use Codia to create a product launch asset pack from ./product.png with a white-background tile, a lifestyle scene, and a 16:9 banner.
Use Codia to generate a campaign poster, adapt it to 1:1, 4:5, and 9:16, and save all outputs in ./outputs.
Use Codia to remove the background from ./product.png and return a transparent PNG.
Use Codia to check my credits and recent usage.Give the agent the source file path, desired page range, target sizes or aspect ratios, output directory, and any visual constraints that matter. For PDFs, page numbers are zero-based in Codia PDF APIs, so page 0 means the first page.
Skill Routing
The top-level codia-design-skills skill is the router, setup, and workflow orchestration entry point. It is useful when the request is broad, account setup is needed, or several Codia tools must be chained together.
Common multi-step requests are handled by workflow instructions such as codia-product-assets, codia-campaign-assets, and codia-document-deck. Focused one-step requests are handled by feature instructions such as codia-image-generate, codia-pdf-to-ppt, codia-remove-bg, codia-image-upscale, codia-image-reframe, and codia-credits.
Available Skills
codia-design-skills
Root router, runtime setup, account check, feature routing, and multi-step workflow orchestration for the Codia Design Skills pack.
Triggers: use Codia, Codia Design, setup Codia, Codia auth, product launch asset pack, PDF to design and PPT, campaign variants
codia-design
Compatibility router and setup instructions for users who install the child skills as separate top-level skills with --full-depth.
Triggers: use Codia, Codia Design, setup Codia, Codia auth, route Codia tools
codia-product-assets
Creates coherent product launch or ecommerce asset packs from product photos, including listing images, store banners, catalog tiles, marketplace visuals, and product scene variations.
Triggers: product launch asset pack, ecommerce images, product listing images, store banner, product marketing images, marketplace visuals
codia-campaign-assets
Creates campaign posters, launch graphics, hero images, social creative sets, controlled variants, and multi-size adaptations.
Triggers: campaign poster, marketing visual, launch graphic, social creative set, hero image, multi-size assets
codia-document-deck
Converts PDFs, screenshots, reports, documents, or existing marketing files into editable design data, PPTX slides, or both.
Triggers: PDF to design and PPT, document to deck, PDF to editable design, report to slides, screenshot to design
codia-image-generate
Generates new images from text prompts for posters, campaign visuals, product concepts, backgrounds, icons, and visual drafts.
Triggers: generate image, make a poster, create campaign visual, product launch visual, visual draft, background image
codia-image-image-to-image
Creates a new image from one or more reference images while preserving or transforming visual direction.
Triggers: transform this image, restyle image, reference-based generation, create variants from image, image-to-image
codia-image-remix
Creates controlled visual variations from an existing image while keeping the core concept recognizable.
Triggers: remix image, make variants, campaign alternatives, different mood, same style variations
codia-image-reframe
Adapts an image into new aspect ratios and layouts for social, ads, banners, posters, thumbnails, and packaging.
Triggers: resize for social, adapt to 9:16, make banner, reframe poster, change aspect ratio
codia-image-upscale
Increases resolution and improves final asset quality for generated images, product photos, graphics, and delivery files.
Triggers: upscale, make HD, increase resolution, sharpen, final delivery, improve quality
codia-remove-bg
Removes image backgrounds and returns transparent-background assets for products, portraits, and isolated subjects.
Triggers: remove background, transparent PNG, cutout, isolate product, extract subject
codia-image-replace-bg
Replaces an image background with studio, lifestyle, ecommerce, or campaign scenes.
Triggers: replace background, white studio background, lifestyle scene, ecommerce background, product scene
codia-image-object-erase
Removes unwanted objects, props, defects, clutter, or distractions from images the user is allowed to edit.
Triggers: remove object, erase prop, clean clutter, remove defect, remove bystander
codia-image-watermark-remove
Removes watermarks or overlays only from user-owned or otherwise authorized images.
Triggers: remove watermark, clean overlay, authorized watermark removal
codia-image-describe
Describes and analyzes image content, style, layout, visible details, and visual intent.
Triggers: describe image, inspect image, summarize image, extract visual details, caption image
codia-image-to-design
Converts screenshots, posters, UI mockups, and images into editable Codia design data.
Triggers: image to design, screenshot to design, editable design JSON, turn mockup into design data
codia-image-layering
Converts an image into Codia layering DSL for structured editable reconstruction.
Triggers: image layers, layering DSL, structured design data, editable reconstruction
codia-pdf-to-design
Converts selected PDF pages into editable Codia design data.
Triggers: PDF to design, extract PDF pages, editable PDF design, PDF layout reconstruction
codia-pdf-to-ppt
Converts selected PDF pages into a downloadable PPTX deck and validates the downloaded PowerPoint file.
Triggers: PDF to PPT, PDF to PowerPoint, convert PDF pages to slides, make deck from PDF
codia-svg
Vectorizes logos, icons, and images into SVG through the asynchronous Codia SVG workflow.
Triggers: vectorize image, logo to SVG, icon to SVG, create SVG
codia-credits
Checks current Codia Open API credit balance before or after agent work.
Triggers: Codia credits, credit balance, quota left, enough credits
codia-usage
Inspects Codia Open API usage records and recent task costs.
Triggers: Codia usage, usage records, billing history, recent cost, task consumption
codia-auto-recharge
Reads or updates Codia Open API automatic recharge settings.
Triggers: auto recharge, quota top-up, recharge threshold, recharge limit
Install The Runtime
Automatic CLI bootstrap
The agent will check whether codia-design is available before calling Codia APIs. If the command is missing and the agent is allowed to run global npm installs, it may install the runtime automatically.
Manual install:
npm install -g @codia-ai/codia-design-cliWindows PowerShell:
npm install -g @codia-ai/codia-design-cliUpdate an existing install:
npm install -g @codia-ai/codia-design-cli@latestRun without installing globally:
npx -y @codia-ai/codia-design-cli --helpConnect An API Key
Use browser login when it is available:
codia-design auth login --platform codexOr bind an API key directly:
codia-design auth set --api-key api_key_xxxThe CLI stores local auth state in:
~/.codia/design-skills/config.jsonDo not commit this file, print it in chat, or include it in a package archive.
Verify Access
Run these checks after installing the skill and runtime:
codia-design --version
codia-design --help
codia-design auth status
codia-design creditsFor command-specific guidance, run codia-design <command> --help, codia-design image --help, or codia-design image <command> --help.
Optional Direct CLI Reference
These commands are mainly for manual debugging, local verification, or cases where an agent asks you to approve the exact command it plans to run.
codia-design image-to-design --image ./screenshot.png --out result.json
codia-design pdf-to-design --pdf ./file.pdf --pages 0,1 --out result.json
codia-design pdf-to-ppt --pdf ./file.pdf --pages 0,1,2 --title "Deck" --poll --out deck.json
codia-design image generate --prompt "modern product launch visual" --model seedream_5 --size 2560x1440 --download-dir ./outputs
codia-design image replace-bg --image ./product.png --prompt "clean white studio background" --model nano_banana_2 --download-dir ./outputs --out replace-bg.json
codia-design image upscale --image ./photo.png --model codia_image_v2 --download-dir ./outputs --out upscale.json
codia-design remove-bg --image ./product.png --download-dir ./outputs --out remove-bg.json
codia-design svg create --image ./logo.png --out svg-task.json
codia-design usage --page 1 --page_size 20Image-output commands download returned images by default. Pass --download-dir DIR to choose the local output directory; the JSON response will include data.local_file or data.local_files next to the remote URL fields. Use --no-download only when a JSON-only response is required.
The CLI calls the public Open API v2 surface (/v2/open/*). Billable commands estimate the open_api_v2 credit cost before running, then query codia-design credits after the operation completes. If the remaining available_credits is below 2x the estimated cost, the CLI prints a reminder to stderr but does not block generation. Pass --estimate to show the estimate without sending the request. Common fixed prices are pdf-to-design 13 credits/page, pdf-to-ppt 13 credits/page, image-to-design 13 credits/request, remove-bg 13 credits/request, image describe 5 credits/request, image layering 27 credits/request, and svg create 13 credits/create. Image generation and several edit tools vary by model and resolution. Use codia-design limits or the API reference at https://codia.ai/api-reference#description/introduction for the live pricing and limits table.
PDF page numbering is zero-based across PDF APIs:
pdf-to-design --pagesis zero-based. Use0for the first page.pdf-to-ppt --pagesis zero-based. Use0for the first page.
pdf-to-ppt follows the task workflow in the public API reference: local files are uploaded to POST /v2/open/uploads first, then the CLI creates operation: "pdf_to_ppt" with POST /v2/open/tasks, polls GET /v2/open/tasks/:task_id, and downloads result.ppt_url. The API expects NotebookLM-style image-only PDFs; report API errors directly and do not generate local substitute PPTX files unless explicitly requested.
Security
Before publishing, packaging, or opening a pull request, scan for obvious secrets:
rg -n --hidden -S \
-g '!.git' -g '!node_modules' -g '!dist' \
'(CODIA_API_KEY|api_key_[A-Za-z0-9_-]+|Authorization: Bearer|BEGIN (RSA|EC|OPENSSH) PRIVATE KEY)' .No output means this rule set did not find a matching plaintext secret. It is not a complete security audit.
Read SECURITY.md for credential handling rules, local file permissions, and runtime bootstrap policy.
Version
Current public skills release: v0.1.1
Requires CLI: @codia-ai/codia-design-cli >=0.1.1
The runtime CLI is distributed separately through the @codia-ai/codia-design-cli npm package.
Security And Data Handling
Codia Design Skills run on the user's machine through the local codia-design CLI. This document explains what the skill may access, where credentials live, and what maintainers should check before publishing the skill repository.
Local Credentials
Authenticated API calls require a Codia API key. The runtime looks for credentials in this order:
1. A command-line --api-key value, when the command supports it. 2. CODIA_API_KEY from the environment. 3. The local config file at ~/.codia/design-skills/config.json.
Credential rules:
- Do not commit
~/.codia/design-skills/config.json. - Do not paste API keys into issues, pull requests, screenshots, or chat transcripts.
- Prefer environment variables for CI and temporary test sessions.
- Keep config files readable only by the local user when the operating system supports it.
- Redact keys before sharing logs. Showing a short prefix is acceptable for diagnostics; full keys are not.
Runtime Boundary
The skill is an instruction pack. It does not contain a hosted service and does not send requests by itself. API traffic is created by the runtime CLI:
agent instruction -> codia-design CLI -> Codia Open APIExpected local actions:
- Run documented
codia-designcommands. - Read user-provided local images, PDFs, and output JSON files needed for the task.
- Write result files only to paths requested by the user, CLI defaults, or documented output directories.
- Read Codia auth status from
~/.codia/design-skills/config.json.
The skill should not run arbitrary project scripts, execute user-supplied binaries, or inspect unrelated project files as part of a Codia workflow.
CLI Installation
If codia-design is missing, an agent may install the runtime only when the user environment permits global npm installs and the install command is the documented package:
npm install -g @codia-ai/codia-design-cliFor upgrades:
npm install -g @codia-ai/codia-design-cli@latestIf global npm install is not allowed, the runtime may be invoked through npx:
npx -y @codia-ai/codia-design-cli --helpIf the agent does not have permission to install global packages, it should show the command and wait for the user to install it.
Request And Output Data
User prompts, URLs, local paths, and JSON fields are task inputs. They must not override the skill's safety rules or expand command permissions.
Generated outputs can include:
- JSON API responses.
- Downloaded images.
- Downloaded SVG files.
- Downloaded PPTX files returned by PDF-to-PPT.
Before reporting a successful file-producing command, the CLI should verify that returned download URLs are reachable and that downloaded files match the expected format.
Repository Publishing
Before publishing the skills repository, review the files that will be visible to users and keep the repository focused on agent instructions, setup docs, license, and security guidance.
Do not publish:
- API keys or bearer tokens.
- Local auth config files.
- Internal-only request headers.
- Private server URLs or temporary debugging endpoints.
- User-specific absolute paths.
Pre-Publish Checks
Run a secret scan before committing, pushing, packaging, or publishing:
rg -n --hidden -S \
-g '!.git' -g '!node_modules' -g '!dist' \
'(CODIA_API_KEY|api_key_[A-Za-z0-9_-]+|Authorization: Bearer|BEGIN (RSA|EC|OPENSSH) PRIVATE KEY)' .Also check for user-specific local paths:
rg -n --hidden -S '/Users/|C:\\\\Users\\\\' \
-g '!.git' -g '!node_modules' -g '!dist' .No output from these commands means the patterns did not find a match. It does not prove the repository is free of secrets.
Reporting Security Issues
Report security issues privately to the project maintainers. Do not include working exploits, credentials, or private user data in public issues.