Add AI Pass integration plugin

[eiliyaabedini]

Summary

Adds the official aipass-integration plugin as a bundled, inert Agent Skill for Cline.

The skill helps Cline add AI Pass as an optional user-funded AI or BYOK-alternative path while preserving an application's existing hosting, authentication, billing, credits, subscriptions, and direct-provider routes.

Why this belongs in the collection

Developers frequently need AI features without storing end users' provider credentials or paying every user's variable inference bill from one shared account. This plugin gives Cline a reviewed browser-SDK and OAuth workflow for that real application-integration case.

Example:

Add AI Pass as an optional user-funded AI choice in this app. Keep its existing login, billing, hosting, and direct-provider BYOK flow unchanged.

Security and external-service behavior

• The plugin registers only the skills capability.
• It has no tools, hooks, dependencies, lifecycle scripts, subprocesses, dynamic imports, or install-time network activity.
• The complete reviewed skill and all required references are bundled locally; it does not load replacement instructions at runtime.
• The human reviews device authorization and every exact callback in the browser. Cline must not approve that page for the user.
• Setup grants are project-scoped, cannot spend wallet funds, and remain in memory only.
• A real paid inference call requires separate, contemporaneous user approval.
• The README documents network destinations, data handling, temporary device-code storage, backend token storage, paid-service behavior, and preservation of existing product controls.

The bundled source is derived from the MIT-licensed AI Pass agent plugin v1.0.0 and includes the source license. AI Pass terms and privacy links are included in the plugin README.

Validation

• npm run validate - pass
• git diff --check - pass
• all bundled relative Markdown links resolve
• no symlinks, executable files, dependencies, remote instruction loaders, or forbidden artifacts
• setup version, scopes, endpoints, and MCP protocol rechecked against the production canonical skill on 2026-08-12

This contribution was prepared with an AI coding agent and reviewed by the AI Pass publisher.

[eiliyaabedini]

Update: bundled AI Pass integration workflow v1.2.1

This refreshes the existing AI Pass plugin contribution from the older v1.0.0 bundle to the AI Pass plugin v1.0.5 release, whose integration workflow is v1.2.1.

What changed

• Bundles the complete current AI Pass integration skill and the standalone Spaces publication manual; no runtime instruction loader or remote skill fetch is used.
• Keeps AI Pass optional for general BYOK requests and explicitly preserves provider-direct BYOK, existing authentication, billing, deployment, and data.
• Reuses one human-approved, project-bound setup grant for OAuth setup and the approved Space app, avoiding repeated authorization while the grant remains usable.
• Adds explicit untrusted-output boundaries for API, MCP, A2A, and model responses.
• Updates the README provenance to immutable AI Pass plugin v1.0.5 commit 27bb3c15d63201eaff357e0b675b574ebc259fe5.

Validation

• npm run validate
• python /Users/eiliya/.codex/skills/.system/skill-creator/scripts/quick_validate.py plugins/aipass-integration/skills/aipass-integration
• Relative Markdown-link resolution check for the bundled plugin
• Secret, executable-file, and symlink scan of the bundled skill
• git diff --cached --check

The update remains a static, auditable bundle. It does not download or execute remote instructions.

[eiliyaabedini]

Updated the bundled integration workflow to AI Pass v1.2.2 at immutable source commit 1a3f198ba413d2e0d905e6ffe7912bc3832ea4ea.

This adds durable project-level rejection handling and preserves the existing secure BYOK trust boundary; provider keys are never defaulted to browser, local, or device storage. The Cline-specific static-bundle and untrusted-output safeguards remain unchanged.

Validation rerun:

• npm run validate
• skill-creator quick validation
• relative Markdown-link resolution
• secret, executable-file, and symlink scans
• git diff --check

Pushed as ecc66a7.