The Agent Skills Directory

[COMMAND_EXECUTION]: The scripts/build-stack.mjs script executes local system tools (git, ssh-keygen, ssh-keyscan, age, gpg, tar, and gh) to scaffold a development stack. These executions are scoped to generating keys and building archives within a user-defined workspace directory (defaulting to ~/quiver-bootstrap).
[EXTERNAL_DOWNLOADS]: The skill uses ssh-keyscan to fetch public host keys from a user-specified git host (defaulting to github.com) and optional repository management via the GitHub CLI (gh). These are legitimate interactions with well-known services required for the skill's primary purpose.
[SAFE_PRACTICES]: The skill implements strong security patterns including:
Age-encryption for the public bootstrap repository payload.
GPG symmetric encryption for dotfile secrets.
Instructions to handle sensitive data via local environment files (.env) rather than hardcoding.
Explicit --dry-run and --check modes for user verification.

quiver-bootstrap