The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes a variety of shell commands to gather system state, inspect the Nix store, and apply configurations (e.g., nixos-version, journalctl, nix-store --gc). These are necessary and expected for a NixOS administration utility.
[PRIVILEGE_ESCALATION]: The skill provides instructions for the agent to use sudo for administrative actions like rebuilding the system configuration (nixos-rebuild switch), managing channels, and modifying bootloader entries. This level of access is required for the skill's primary function.
[EXTERNAL_DOWNLOADS]: The skill references and executes tools from the well-known nix-community GitHub organization, including disko for partitioning and nixos-anywhere for remote installations. These are standard community-driven tools for NixOS.
[INDIRECT_PROMPT_INJECTION]: The skill exposes a surface for indirect prompt injection as it processes untrusted data from system logs (journalctl, dmesg) and external configuration files in /etc/nixos/.
Ingestion points: Ingests system logs, hardware profiles, and user-provided Nix configuration files.
Boundary markers: The skill includes an 'AI Self-Check' workflow and explicit instructions for state gathering, which serve as internal checkpoints for the agent.
Capability inventory: The skill has the capability to execute shell commands with elevated privileges, write to system files, and perform network operations for binary caches.
Sanitization: The instructions emphasize declarative configuration, the use of dry-activate for previewing changes, and manual verification of logs to mitigate risks from processing external inputs.

nixos-btw