The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses standard macOS shell commands (mv, cp, mkdir, git) to manage user configuration files. These operations are restricted to the user's home directory and are preceded by safety checks such as diffing and backups.
[EXTERNAL_DOWNLOADS]: The skill instructs the installation of legitimate utility tools (chezmoi, stow, gitleaks) via Homebrew (brew install). These are industry-standard tools for dotfile management and security auditing.
[DATA_EXPOSURE]: The skill includes a robust security section regarding 'secrets hygiene.' It explicitly identifies sensitive directories (e.g., ~/.ssh/, ~/.aws/, ~/.kube/) and file types (e.g., .env, .pem) that must never be added to the repository. It also mandates a secrets scan using gitleaks before any code is committed or pushed to a remote repository.

dotfiles-setup