The Agent Skills Directory

[COMMAND_EXECUTION]: The skill makes extensive use of system-level commands such as systemctl, useradd, chown, and chmod to manage the lifecycle of the Headscale control server and Tailscale clients. These operations are essential for infrastructure management and are performed within the scope of the skill's primary purpose.
[EXTERNAL_DOWNLOADS]: The skill fetches installation packages and binaries from official and well-known sources. Specifically, it downloads the Tailscale client from pkgs.tailscale.com and the Headscale binary from the project's official GitHub repository (github.com/juanfont/headscale). It also pulls the official tailscale/derper Docker image for relay deployments.
[PRIVILEGE_ESCALATION]: Several scripts, including ts-install.sh and hs-restore.sh, use sudo to perform administrative tasks such as package installation and service restoration. This is required for configuring network interfaces and system-wide services involved in a VPN deployment.
[INDIRECT_PROMPT_INJECTION]: The diagnostic and reporting scripts ingest data from the tailnet (such as node hostnames and tags) which is provided by external peers. While this introduces an attack surface where malicious metadata could be processed, the skill mitigates risk by using structured data parsers like jq and Python's json module, and the identified risk level is low.
[DYNAMIC_EXECUTION]: The skill uses Python and Bash wrappers to dynamically generate configuration snippets and process CLI outputs. These execution patterns are local, use fixed templates, and are a standard part of the bundle's automation logic.

tailscale