The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides Bash and Python scripts to automate OrbStack management, including VM creation (orb create), Docker context switching, and container monitoring. These operations are essential for the skill's purpose and operate on local environments.
[PRIVILEGE_ESCALATION]: The instructions include administrative commands using sudo for system maintenance tasks, such as flushing the macOS DNS cache (dscacheutil) and inspecting network port bindings (lsof). These are standard procedures for troubleshooting networking in a development environment.
[DATA_EXPOSURE]: The skill interacts with local configuration files and sockets, including ~/.orbstack/run/docker.sock and ~/.docker/config.json. Access to these files is necessary for the agent to manage Docker and virtualization settings, and no evidence of exfiltration was found.
[INDIRECT_PROMPT_INJECTION]: The skill processes metadata from Docker containers and Linux VM states which constitutes a theoretical attack surface if such data were manipulated by a malicious container. However, the risk is inherent to system management tools and mitigated by the local scope of the operations.
Ingestion points: Docker API socket (/containers/json), orb list output, and orbstack.log.
Boundary markers: None explicitly implemented in the provided automation scripts.
Capability inventory: Full VM management (orb), Docker engine control, and Kubernetes management (kubectl).
Sanitization: None performed on container or VM metadata before display.

orbstack