From 4249def707275b4cc17f46e5c2024a7ba7edec70 Mon Sep 17 00:00:00 2001 From: Hoang Nguyen Date: Wed, 14 Oct 2026 16:00:13 +0000 Subject: [PATCH] docs(ai-devkit-setup): scope unsandboxed execution to listed commands Restrict the outside-sandbox clause to the ai-devkit status/setup commands in this skill, require telling the user why, and pin the npx fallback to 0.70.1. Instruction text only. --- skills/ai-devkit-setup/SKILL.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/skills/ai-devkit-setup/SKILL.md b/skills/ai-devkit-setup/SKILL.md index 867281d13..311f44e6c 100644 --- a/skills/ai-devkit-setup/SKILL.md +++ b/skills/ai-devkit-setup/SKILL.md @@ -7,11 +7,11 @@ description: AI DevKit ยท Check local AI DevKit readiness and run setup only whe Use this skill when a user wants to onboard AI DevKit, prepare a harness, repair local AI DevKit integration, or check whether setup is needed. -Keep the workflow status-driven and simple. Prefer the installed `ai-devkit` binary; if it is unavailable, use `npx ai-devkit@latest`. +Keep the workflow status-driven and simple. Prefer the installed `ai-devkit` binary; if it is unavailable, use `npx ai-devkit`. ## Execution Notes -- Under filesystem sandboxing, run `ai-devkit status --json` and any `ai-devkit setup` command outside the sandbox. These commands inspect and modify host-level agent configuration; sandboxed runs can produce false failures or block setup writes, especially for integrations that execute harness commands and access paths like `~/.pi/agent`. +- Under filesystem sandboxing, run only the `ai-devkit status --json` and `ai-devkit setup` commands listed in this skill outside the sandbox. These commands inspect and modify host-level agent configuration; sandboxed runs can produce false failures or block setup writes, especially for integrations that execute harness commands and access paths like `~/.pi/agent`. Tell the user why unsandboxed execution is needed, and do not run other commands outside the sandbox. ## Workflow