The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill is designed to download CLI binaries from external sources, primarily the Aqua registry hosted on GitHub and user-defined HTTP URLs in configuration files.
[REMOTE_CODE_EXECUTION]: Downloads and executes third-party binaries. To mitigate the risk of executing malicious code, the skill provides a verification system that checks package integrity using checksums, cosign signatures, and SLSA attestations when metadata is available.
[INDIRECT_PROMPT_INJECTION]: The toolchain's behavior is driven by external configuration files such as .tool-versions and registry YAML files. While this creates a surface where a compromised repository could attempt to point the agent to malicious binaries, the skill follows standard dependency management patterns and encourages the use of pinned versions and verification.
[COMMAND_EXECUTION]: Provides explicit commands like atmos toolchain exec to run third-party binaries within the managed environment.
[CREDENTIALS_UNSAFE]: The skill references the use of ATMOS_GITHUB_TOKEN and GITHUB_TOKEN to handle GitHub API rate limits. This is standard practice for tools interacting with GitHub's infrastructure.

atmos-toolchain