The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes a wide range of shell commands to audit the system, manage symlinks with GNU Stow, interact with Git, and modify macOS defaults. These operations are core to the skill's functionality as a dotfiles manager.
[EXTERNAL_DOWNLOADS]: The skill facilitates the installation of well-known tools and frameworks, including Homebrew, the 'age' encryption utility, NVM (Node Version Manager), and Oh My Zsh. These downloads target established services and official repositories.
[PRIVILEGE_ESCALATION]: The setup process uses sudo for a specific, transparent administrative task: adding the Homebrew-installed Zsh to the list of authorized shells in /etc/shells and changing the user's default shell via chsh.
[DYNAMIC_EXECUTION]: The skill generates a custom setup.sh script based on the user's system audit and preferences. Additionally, it uses an inline Python script to scan JSON configuration files for potential secrets during the auditing process to prevent accidental data exposure.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted local configuration data as part of its core workflow.
Ingestion points: Reads local configuration files such as .zshrc, .gitconfig, and various application settings during the system audit and state capture workflows.
Boundary markers: Instructions require presenting all discovered files to the user for review and selection before they are tracked or modified.
Capability inventory: The skill can execute shell commands (brew, stow, defaults), write files to the repository, and modify system shell settings.
Sanitization: Implements a robust 'Security Scan' step that uses both regex patterns for known secret prefixes and a structural Python script to identify potential credentials in data files.

dotfiles-mac