The Agent Skills Directory

Remote Code Execution & Installer Patterns: The one-line-installer-patterns.md guide discusses the use of curl | bash for software distribution. While this is a powerful pattern, the skill explicitly addresses the associated security trade-offs and provides a set of required mitigations, such as using HTTPS, version pinning, and checksum verification.
Persistence Mechanism Implementation: The self-managing-tool-patterns.md guide describes how to install and manage long-lived services using system-level managers like systemd on Linux and launchd on macOS. It provides templates for service files that include security considerations like limited PATH environments.
Command Execution for System Management: Several reference files (e.g., container-orchestration-patterns.md, self-managing-tool-patterns.md) utilize subprocess.run or asyncio.create_subprocess_exec to interact with system tools like Docker, git, and service managers. These are presented as standard patterns for infrastructure management.
Dynamic Plugin Discovery: The plugin-discovery-patterns.md guide outlines an extensibility model using Python's entry_points and a file-based registry. This involves loading code dynamically at runtime, which is managed through a structured two-tier discovery process.
Authentication and Localhost Security: The auth-tls-patterns.md guide provides patterns for securing services, including a localhost bypass technique that relies on socket-level IP verification to prevent header-based spoofing, and methods for automatic secret generation with restricted filesystem permissions.

engineering-patterns