The Agent Skills Directory

[SAFE]: The skill provides documentation and best practices for the Nix ecosystem, acting as a technical knowledge base for the agent.\n- [DATA_EXFILTRATION]: The skill contains defensive instructions warning against the risk of exposing secrets in the world-readable Nix store, correctly identifying that store paths are world-readable and suggesting the use of runtime secrets or encrypted tools like sops-nix instead.\n- [PRIVILEGE_ESCALATION]: The skill provides detailed guidance on mitigating security risks in privileged activation scripts, specifically targeting Time-of-Check to Time-of-Use (TOCTOU) vulnerabilities by advocating for descriptor-relative operations instead of path-based ones.\n- [EXTERNAL_DOWNLOADS]: References to external tools and repositories such as Home Manager, sops-nix, and deploy-rs are for standard, well-known community resources and contribute to the skill's utility without introducing unverifiable risks.

nix-ecosystem