The Agent Skills Directory

Command Execution in Setup Instructions: The skill describes the use of setup.install and setup.startup blocks within the spec.yaml file to execute commands. These mechanisms are designed for environment configuration, such as installing packages or initializing directories. The documentation provides guidance on ensuring these commands are idempotent and run under the appropriate user context.
Use of Privileged Operations: It is noted that commands in the setup.install block run as the root user by default to allow for system-level configuration. The skill includes instructions on managing file permissions to ensure that files created by root remain accessible to the non-privileged agent user.
External Artifact Management: The skill covers the use of sbx kit pull and sbx kit push for retrieving and publishing kits to OCI registries. These are standard operations for managing and sharing environment configurations, and the skill includes steps for verifying artifact provenance and signatures.
Credential Injection and Exposure Warnings: The documentation explains how kits can declare requirements for API keys or OAuth tokens to be injected into the sandbox. It specifically warns against passing sensitive information through unmasked command-line arguments, encouraging the use of the platform's dedicated secret management features.

docker-sandboxes-kits