The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The installation guide in data/install.md references software downloads from the vendor's primary domain (get.x-cmd.com), official GitHub repositories (github.com/x-cmd/release), and the well-known package registry conda.prefix.dev.
[REMOTE_CODE_EXECUTION]: The skill documents an automated installation method using curl -fsSL https://get.x-cmd.com | sh. This pattern is transparently disclosed as a high-risk convenience method, and the documentation provides low-risk alternatives such as Homebrew (brew install x-cmd) and a manual review process to mitigate risks for users in sensitive environments.
[COMMAND_EXECUTION]: The skill interacts with the local environment by executing the x mirror command and requires the agent to source a loader script located at ~/.x-cmd.root/X. This is standard behavior for a CLI-wrapper skill and operates within the user's local directory scope without requiring administrative privileges.

x-mirror