The Agent Skills Directory

[Privileged Command Execution]: The skill utilizes sudo for final Nix verification steps, which is a common requirement for accessing the Nix store. The instructions prioritize user transparency by requiring these commands to run in a visible terminal task where the user handles authentication directly, and it explicitly forbids the agent from attempting to capture or manage passwords.
[External Resource Retrieval]: The skill fetches firmware release metadata and assets from the official Microsoft mu_msvm repository and retrieves nixpkgs tarballs. These downloads are essential for the firmware update process and target trusted infrastructure.
[Automated Repository Operations]: The skill automates branch management, code commits, and pull request creation. It includes several safety checks, such as verifying remote branch status before creation and ensuring local changes are preserved, to prevent accidental data loss or history overwrites.
[Dynamic Expression Execution]: The workflow involves generating and executing Nix expressions at runtime to verify build hashes. This is an industry-standard method for verifying the integrity of unpacked dependencies within a Nix-based build system.
[Local Development Tooling]: The skill executes standard Rust and Nix toolchain commands (e.g., cargo check, nix-build) to validate the environment. These operations are scoped to the project's directory and intended maintenance tasks.

update-mu-msvm