The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses the Bash tool to interact with the pylot CLI and manage local and remote developer environments. This includes executing commands for authentication, project discovery, and managing worker lifecycle (spawn, stop, resume).
[REMOTE_CODE_EXECUTION]: The skill facilitates remote code execution by design through the pylot workers prompt command, which sends text-based instructions to be executed in remote Fargate-based devboxes. This is the primary intended function of the skill for 'mission' automation.
[EXTERNAL_DOWNLOADS]: The skill performs network operations to https://hooks.fellowship.dev for API interactions and uses curl to upload assets to presigned URLs. These operations are restricted to the vendor's infrastructure and are used for legitimate asset management and API communication.
[CREDENTIALS_UNSAFE]: The documentation discusses the handling of PYLOT_API_TOKEN and PYLOT_OPERATOR_TOKEN. It explicitly includes safety instructions for the agent to 'never print' these tokens, to inspect identity responses rather than variable contents, and to use the official device-auth broker rather than copying local credential directories. These are identified as safe management practices for an administrative CLI.

pylot-cli