The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: Fetches portable Node.js binaries from official distributions (nodejs.org) or well-known mirrors (npmmirror.com). All downloads are verified against pinned SHA256 checksums defined within the bootstrap scripts.
[COMMAND_EXECUTION]: Executes shell and PowerShell scripts to provision a project-local environment. It uses npm install with the --ignore-scripts flag as a security best practice to prevent arbitrary code execution during package installation, and runs a diagnostic 'doctor' command to verify the setup.
[PERSISTENCE]: Automatically registers the BioMCP server in various agent and IDE configuration files (such as opencode.json and .mcp.json) to ensure the tools remain available in future sessions. It also updates the project's .gitignore to prevent the local runtime from being committed to version control.
[SAFE]: The skill follows security best practices by isolating all dependencies within a hidden project-local directory (.bioresearcher-runtime/), avoiding global system changes, and using cryptographically verified binaries from trusted sources.

bioresearcher-onboard