The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The skill uses hardcoded credentials (user and password) for both the Windows VM container environment variables and non-interactive SSH authentication.
[COMMAND_EXECUTION]: The skill executes several high-impact commands including docker run with elevated capabilities (NET_ADMIN) and hardware access (/dev/kvm), rm for file deletion, and sshpass which exposes passwords in the process list.
[REMOTE_CODE_EXECUTION]: The skill pipes complex PowerShell scripts through SSH to the guest VM to install Node.js, modify system-wide PATH variables, and change execution policies to RemoteSigned at the LocalMachine scope.
[EXTERNAL_DOWNLOADS]: Fetches the Node.js installer from official Node.js distribution servers and installs the Claude Code package from Anthropic's registry. The Windows VM itself is based on the dockurr/windows image from a third-party source.

windows-vm