The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill references official and well-known repositories within the Nix ecosystem, including those from the NixOS organization, nix-community, and the Lix project. These are standard sources for Nix system updates and package management.
[DATA_EXFILTRATION]: The skill contains explicit security warnings against storing plaintext secrets in the Nix store (which is world-readable) and provides detailed instructions for implementing secure, encrypted secret management using sops-nix and agenix.
[COMMAND_EXECUTION]: The instructions include standard system administration commands necessary for the skill's purpose, such as nixos-rebuild, darwin-rebuild, and nix-build. These are used declaratively to manage system state.
[REMOTE_CODE_EXECUTION]: While Nix involves downloading and building code, the skill emphasizes the use of fixed-output derivations with SRI hashes to ensure integrity and reproducibility, which is a key security feature of the Nix ecosystem.
[SAFE]: The skill includes an 'Adversarial Reasoning' section internally that correctly identifies and warns against common Nix-specific misconfigurations (e.g., using with pkgs; or rec { }) and security risks (baking secrets into the store).

ultimate-nixos