The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses mise hooks to automatically execute multiple scripts including link-agentfiles.sh, provision-packs.py, sync-skills.py, and sync.py whenever a user enters a project directory.
[PERSISTENCE]: The skill configures systemd services and timers such as hermes-gateway and hermes-heartbeat to maintain active agents across system restarts.
[PERSISTENCE]: The skill injects project-specific hooks into global user configuration files for multiple AI agent CLIs, specifically ~/.codex/hooks.json and ~/.kimi-code/config.toml.
[REMOTE_CODE_EXECUTION]: The provision-packs.py script dynamically fetches and materializes skill packs from remote Git repositories into the project's .agents/skills/ directory.
[EXTERNAL_DOWNLOADS]: The skill uses npx -y bmad-method@latest install to download and execute tooling from the npm registry.
[DATA_EXFILTRATION]: The Hindsight memory feature sends agent context and learnings to the external API https://api.hs.delo.sh.
[DATA_EXFILTRATION]: The Bloodbank integration publishes events to a NATS event bus, which defaults to 127.0.0.1:4222.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from Plane ticket boards and Hindsight memories, which could contain malicious instructions. Ingestion points: Hindsight recall results and Bloodbank event data. Boundary markers: Uses <hindsight-memory> tags to delimit memory content. Capability inventory: Includes shell command execution via mise, file system writes for configurations, and network operations for API and NATS communication. Sanitization: Employs HMAC signature verification for incoming Plane webhooks.

33god-projects