The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructions suggest using npx -y osmatrix@0 to invoke the CLI if it is not pre-installed, which fetches the package from the official npm registry.
[COMMAND_EXECUTION]: The skill provides tools for executing arbitrary shell commands and CI workflows within guest environments (containers and VMs) via the env_exec and ci_run tools (and their corresponding CLI commands osmatrix exec and osmatrix ci run).
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from repository workflow files and codebase which could contain malicious instructions.
Ingestion points: Repository workflow files (.github/workflows/*), repository source code, and event payload files provided to the run command.
Boundary markers: No specific delimiters are enforced for the content of the workflows being executed.
Capability inventory: Includes arbitrary command execution (env_exec) and full GitHub Action workflow execution (ci_run) in guest environments.
Sanitization: Security isolation is provided by the underlying virtualization (Docker/VMs) rather than prompt-level sanitization.
[PRIVILEGE_ESCALATION]: Documentation mentions a provisioning step (osmatrix provision <guest> --passwordless-sudo) to configure passwordless sudo access within macOS guest environments.

osmatrix-ci