The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill downloads the portless tool directly from the official npm registry (registry.npmjs.org). This is performed using a dedicated installation script that implements security checks including SHA-512 integrity verification and scans for Indicators of Compromise (IOCs).
[REMOTE_CODE_EXECUTION]: The skill installs the portless CLI tool from a trusted organization (Vercel Labs). The tool is intended for local development use and is installed via standard package management.
[COMMAND_EXECUTION]: Executes shell commands to manage proxy aliases, generate SSL certificates via OpenSSL, and parse configuration files using yq.
[PRIVILEGE_ESCALATION]: Requires administrative privileges to bind to port 443, sync entries to the system hosts file, and add the local CA to the system trust store. These operations are essential for the tool's primary purpose of providing a local HTTPS proxy.
[PERSISTENCE_MECHANISMS]: Includes functionality to install the proxy as a background service or a Windows Task Scheduler entry, allowing it to start automatically upon system boot.
[INDIRECT_PROMPT_INJECTION]: The skill processes user-defined files like process-compose.yaml (ingestion point) in sync-aliases-from-yaml.ps1 to derive routing aliases. While it lacks explicit sanitization and boundary markers, it relies on PowerShell argument handling for the portless alias command (capability). The risk is assessed as low given the intended local-dev context.

portless-ops