The Agent Skills Directory

[COMMAND_EXECUTION]: The skill defines bash templates for container lifecycle management using the Docker CLI. It includes documentation for performing docker run, docker pull, docker login, and docker inspect to manage NVIDIA GPU workloads.
[PRIVILEGE_ESCALATION]: Includes instructions for using sudo to configure the Docker daemon and relocate its storage directory. Specifically, it provides commands such as sudo systemctl stop docker and sudo tee /etc/docker/daemon.json to update the data-root configuration. These operations are documented as necessary administrative steps for managing large container images on hosts with limited root partitions.
[EXTERNAL_DOWNLOADS]: Documents the process for pulling container images from the NVIDIA Container Registry (nvcr.io) and provides references to official documentation for Docker engine installation and the NVIDIA Container Toolkit.
[INDIRECT_PROMPT_INJECTION]: The skill acts as a template for executing external container images and commands, which constitutes a potential vulnerability surface.
Ingestion points: User-provided inputs for <image> and <command> parameters within the docker run templates in SKILL.md.
Boundary markers: The skill uses bash variable interpolation for command construction; it provides explicit notes on escaping device flags.
Capability inventory: The skill utilizes the Bash tool and has the potential to access the host filesystem via Docker bind mounts.
Sanitization: The skill mitigates potential risks by enforcing host identity mapping (--user "$HOST_UID:$HOST_GID") and includes explicit checks to prevent execution as root (UID 0) on the host to protect file ownership integrity.

tao-run-on-docker