The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The documentation describes a initialization step in docker/stage2-hook.sh (running as 01-hermes-setup) that seeds default configuration files, including a .env file, which is a standard practice for container environment setup.
[DYNAMIC_EXECUTION]: The skill mentions that hermes_cli/service_manager.py contains logic (_render_run_script) for generating s6 service run scripts at runtime. This dynamic generation is used to register and manage per-profile gateway services within the container.
[INDIRECT_PROMPT_INJECTION]: The container's boot reconciliation process (02-reconcile-profiles) reads persistent files such as gateway_state.json and SOUL.md from the user's profile directory to restore service states. While this is an ingestion point for persistent data, it is a functional requirement for the agent's profile management system.
[PRIVILEGE_ESCALATION]: The skill explicitly documents the use of s6-setuidgid to drop from root to the hermes user for the main program and supervised services, following security best practices for containerized applications.

hermes-s6-container-supervision