The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The skill utilizes cloud API credentials and SSH keys to provision and manage virtual infrastructure.
Environment variables LOCAWEB_API_KEY and LOCAWEB_API_SECRET are used for HMAC-SHA1 signing of API requests to the CloudStack endpoint.
SSH keys are accessed at ~/.ssh/cloud-weaver and ~/.ssh/cloud-weaver.pub to register with the cloud provider and verify the VM connectivity.
[COMMAND_EXECUTION]: Provisioning involves local script execution and remote commands for configuration verification.
Executes the bundled scripts/vm-provision.py orchestration script using the Python 3 interpreter.
Executes ssh with StrictHostKeyChecking=accept-new to verify the state of the provisioned VM (Docker status and mount points).
[EXTERNAL_DOWNLOADS]: The VM bootstrap process fetches software from official repositories.
The scripts/userdata/boot_vm.sh script, executed via cloud-init, uses apt-get to install standard packages including docker.io, fail2ban, jq, and curl from official Ubuntu mirrors.
[INDIRECT_PROMPT_INJECTION]: The skill accepts user-defined parameters which influence resource naming and configuration.
Ingestion points: User-supplied values for env_name, zone, plan, disk_gb, and app_ports are gathered in SKILL.md.
Boundary markers: The skill presents a provisioning plan summary and waits for explicit user confirmation before proceeding.
Capability inventory: The skill performs local script execution, network API calls to CloudStack, and remote SSH command execution.
Sanitization: Inputs are validated against strict regular expressions (e.g., ^[a-z0-9_]+$) in both the instructions and the provisioner script to prevent injection.

cloud-weaver-vm-setup