otp-challenger
This skill provides OTP verification for TOTP and YubiKey with helper scripts for secret management and status checks. It reads secrets (`OTP_SECRET`, `YUBIKEY_SECRET_KEY`), calls `https://api.yubico.com/wsapi/2.0/verify`, and executes user-configurable hooks (`$OTP_FAILURE_HOOK`) that run arbitrary shell commands.