The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill instructions advise using npx -y osmatrix@0 <command> if the CLI is not found on the host. This method automatically downloads and executes code from the NPM registry without requiring user confirmation or manual installation steps.
[COMMAND_EXECUTION]: Through the env_exec tool and the osmatrix exec CLI command, the agent can execute arbitrary shell commands (Bash, PowerShell, Zsh) in remote or virtualized guest environments.
[CREDENTIALS_UNSAFE]: The file references/reference.md explicitly discloses the host filesystem path where guest passwords and credentials are stored (guests/<name>/credentials.json).
[DATA_EXFILTRATION]: The env_pull and env_push tools facilitate the movement of files between the host and guest environments. The requirement for absolute host paths increases the risk of accessing sensitive directories if the agent identifies paths outside the intended workspace.
[PRIVILEGE_ESCALATION]: Guest environments are configured with high privileges, such as passwordless sudo for macOS and admin roles for Windows. Additionally, the env_input tool allows sending low-level keyboard sequences like ctrl+alt+delete, which can be used to interact with secure system prompts.
[DYNAMIC_EXECUTION]: The skill supports starting background processes and long-running services in the guest via env_exec with the --background flag, providing a mechanism for persistent or hidden activity within the virtual machines.

osmatrix-guests