The Agent Skills Directory

[COMMAND_EXECUTION]: Use of highly privileged Docker containers to register binary format handlers in the host kernel.
Evidence: docker run --privileged --rm tonistiigi/binfmt --install all in SKILL.md allows the container to modify the host's /proc/sys/fs/binfmt_misc.
[COMMAND_EXECUTION]: The skill requires administrative privileges to perform Layer 2 network bridging on macOS.
Evidence: sudo qemu-system-x86_64 ... -netdev vmnet-bridged,id=n0,ifname=en5 in references/macos-vm-bridging.md invokes QEMU with root privileges to access the vmnet framework.
[COMMAND_EXECUTION]: The virtual machine initialization process automatically executes an arbitrary shell script from the host's current working directory.
Evidence: The init script in references/macos-vm-bridging.md contains sh /host/.vm-cmd.sh, where /host is a 9p mount of the host's . (current directory). This allows for automatic execution of untrusted code if the directory contains a malicious .vm-cmd.sh file.
[EXTERNAL_DOWNLOADS]: Fetches emulation binaries and support tools from external repositories.
Evidence: SKILL.md describes using crane export to download the tonistiigi/binfmt image from Docker Hub and extracting the qemu-i386 binary.

tikoci-qemu-user-emulation