The Agent Skills Directory

[COMMAND_EXECUTION]: The skill automates workspace setup using standard development tools including git, colcon, docker, and pixi. On Windows, it utilizes the official winget tool to manage environment dependencies.
[EXTERNAL_DOWNLOADS]: Fetches the Pixi binary from its official GitHub releases. The implementation enforces security best practices by verifying the binary against a SHA256 checksum and strictly requiring HTTPS for the download and any redirects.
[PRIVILEGE_ESCALATION]: Utilizes sudo on Linux to manage system packages and ROS dependencies. The scripts are designed to detect non-interactive sessions, failing with clear instructions rather than hanging for a password, and they require explicit confirmation flags for destructive operations like cleaning a directory.
[DYNAMIC_EXECUTION]: The skill executes external scripts (such as build_ros.sh from the cloned vendor repository) and the downloaded Pixi binary as part of the workspace build process.
[INDIRECT_PROMPT_INJECTION]: The skill allows the configuration of repository URLs and file paths, which could theoretically be used to clone untrusted code if the input is malicious.
Ingestion points: RepoUrl, Branch, and RepoPath parameters in setup_ros_workspace.sh and setup_pixi_workspace.ps1.
Boundary markers: The skill requires the user to explicitly confirm directory deletion and uses specific context for Isaac Sim ROS tasks.
Capability inventory: Includes file system writing, privileged command execution via sudo, and network access via git and curl.
Sanitization: The scripts implement protective checks that prevent the deletion of sensitive paths such as the filesystem root, user home directory, or symbolic links.

isaac-sim-ros-workspaces