The Agent Skills Directory

Tool Installation from Vendor Repositories: The skill guides users to install the kit-tck conformance tool directly from the vendor's official GitHub repository using go install. As this resource is managed by the recognized author of the skill, it is an expected part of the development lifecycle for these kits.
OCI Image Building and Registry Publishing: The skill instructions involve the use of docker buildx to build and push kit images to OCI registries. It incorporates security considerations by recommending the use of isolated container builders and emphasizing that registry operations like pushing and signing require explicit operator approval.
Capability and Secret Management Guidance: The instructions for creating kit descriptors strongly emphasize the principle of least privilege. The skill explicitly advises users not to hardcode credentials in recipes or descriptors, instead directing them to use host-managed credential injection to maintain security boundaries.
Static Analysis for Layer Ownership: A Python utility script (audit-layer-owners.py) is included to inventory numeric file ownership within OCI layers. This script helps ensure that kits do not introduce permission issues that could compromise sandbox isolation, such as root-owned files appearing in the agent's user directory.
Experimental Feature Awareness: The skill identifies the v3 kit specification as experimental and notes that the grammar is subject to change. It provides specific versioning and verification steps, such as using kit-tck and runtime composition checks, to ensure kits function correctly within supported environments.

docker-sandboxes-kits