The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill downloads the dockurr/windows Docker image from Docker Hub to run the virtual environment. It also retrieves the Node.js installer from nodejs.org and the @anthropic-ai/claude-code package from the NPM registry during the VM setup process.
[COMMAND_EXECUTION]: Extensive use of bash and docker commands to create directories, manage container lifecycles, and pipe complex PowerShell scripts into the VM via SSH.
[CREDENTIALS_UNSAFE]: The skill uses a hardcoded default password (password) and username (user) in its documentation and automation scripts, including the use of sshpass -p 'password' which exposes credentials in the process list and command history.
[PRIVILEGE_ESCALATION]: The docker run command utilizes the --cap-add NET_ADMIN flag and the --device /dev/kvm mapping, granting the container significant networking privileges and direct access to host hardware. Additionally, the instructions suggest using sudo to install host dependencies like sshpass and imagemagick.

windows-vm