← All skills
isolated-setup-update
57 / 100 · Review before installing
Check before installing. Some of what it can do is expected: a security skill usually runs scanners and checks websites.
By apache/magpie (GitHub) · security · 146 stars · scanned at commit 8d24b52
Report drift between the installed secure setup and the framework's current one — checkout, pinned tools, user-scope script copies, denial commands, MCP checkouts. Read-only: it surfaces diffs and the user decides.
Works with any agent that supports SKILL.md skills.
What this skill can do
Downloads and installs other software
The author does not mention this.
Found in 44 places.
Show 17 more
- plugins/magpie-setup/skills/isolated-setup-update/SKILL.md, line 163
Earlier defaults put `~/.local/share/uv/` in `allowWrite`, where the interpreters and tool venvs that hooks, MCP servers and the excluded `uvx` / `uv run` comma - plugins/magpie-setup/skills/isolated-setup-update/SKILL.md, line 190
A `sandbox.excludedCommands` entry spelled `uvx --from ~/.claude/plugins/cache/apache-magpie/magpie-adversarial-review/*/tools/adversarial-review adversarial-re - plugins/magpie-setup/skills/isolated-setup-update/SKILL.md, line 191
Report it as a must-fix whenever the `magpie-adversarial-review` plugin is installed, and propose `uvx --from ~/.claude/magpie/adversarial-review adversarial-re - plugins/magpie-setup/skills/isolated-setup-update/SKILL.md, line 231
- `claude-code` newer build available, or below the `min_version` floor → `npm install -g --no-save @anthropic-ai/claude-code@latest` (no manifest bump — the ru - plugins/magpie-setup/skills/isolated-setup-update/vetted-ops-drift.md, line 13
`vetted-op-tracker` and `vetted-op` each in `ask` and in `sandbox.excludedCommands` (both the `uv run --project` and `uvx --from` forms) is the intended wiring; - plugins/magpie-setup/skills/isolated-setup-update/vetted-ops-drift.md, line 40
- a missing `vetted-op-read` allow rule: each launcher (`uvx --from`, `uv run --project`) with the literal `~/.claude/magpie/vetted-ops` base, two rules; - plugins/magpie-setup/skills/isolated-setup-update/vetted-ops-drift.md, line 43
- any `permissions.ask` rule that matches a `vetted-op-read` command in either launcher form, broad rules such as `Bash(uvx *)` included, since an ask rule prom - AGENTS.md, line 458
uv tool install prek # or: pipx install prek - AGENTS.md, line 522
`uvx --from ~/.claude/magpie/vetted-ops …`, and `uvx --from ~/.claude/magpie/adversarial-review adversarial-review …`. - docs/adapters/codex.md, line 206
Before the rules run, the hook rewrites a command only when the whole command is one read call in that spelling — `uv run --project ~/.claude/magpie/vetted-ops - docs/adapters/codex.md, line 211
Both `uv run --project <installed-path> vetted-op-read` and `uvx --from <installed-path> vetted-op-read` are `allow`. - docs/adapters/codex.md, line 213
There is no general `uv` or `uvx` allow rule and no catalogue-wide write exemption. - docs/adapters/copilot.md, line 74
npm install -g @github/copilot - docs/setup/secure-agent-setup.md, line 217
sudo apt-get install --no-install-recommends \ - docs/setup/secure-agent-setup.md, line 219
npm install -g --no-save @anthropic-ai/claude-code@latest - docs/setup/secure-agent-setup.md, line 321
sudo apt-get install --no-install-recommends \ - docs/setup/secure-agent-setup.md, line 342
sudo dnf install \
and 24 more places
Sends data to these websites: example.com
The author does not mention this. Expected for a security skill.
Found in 10 places.
Show 7 more
- docs/quick-start/other-install-methods.md, line 127
curl -fsSLO ${REL_BASE}/${ZIP}.sha512 - docs/quick-start/other-install-methods.md, line 128
curl -fsSLO ${REL_BASE}/${ZIP}.asc - docs/setup/secure-agent-setup.md, line 717
"WebFetch(domain:cveawg.mitre.org)", "WebFetch(domain:pypi.org)" - docs/setup/secure-agent-setup.md, line 3802
curl https://example.com # → blocked by permissions.deny - docs/setup/secure-agent-setup.md, line 3892
`claude-iso`. (c) `curl https://example.com` is denied. - docs/setup/secure-agent-setup.md, line 4260
missing (new vetted-ops read forms, MCP read tools, WebFetch - docs/setup/secure-agent-setup.md, line 4272
variable names only, 7c `curl https://example.com`) and confirm
Runs commands on your computer
This is disclosed by the author in the skill's SKILL.md or README. It runs automatically when the plugin is installed. Expected for a security skill.
Found in 3 places.
Changes files outside its own folder
The author does not mention this.
Found in 40 places.
Show 17 more
- docs/adapters/goose.md, line 97
| `touch ~/probe` | Blocked. | - docs/adapters/goose.md, line 98
| `echo x >> ~/.config/goose/config.yaml` | Blocked: Goose's configuration is read-only inside. | - docs/adapters/pi.md, line 111
| `touch ~/probe` | Blocked. | - docs/quick-start/other-install-methods.md, line 146
mkdir -p .agents/skills .claude/skills .github/skills - docs/quick-start/other-install-methods.md, line 148
ln -sf ../../.agents/skills/magpie-setup .claude/skills/magpie-setup - docs/quick-start/other-install-methods.md, line 224
mkdir -p .agents/skills .claude/skills .github/skills - docs/quick-start/other-install-methods.md, line 226
ln -sf ../../.agents/skills/magpie-setup .claude/skills/magpie-setup - docs/quick-start/other-install-methods.md, line 255
mkdir -p .agents/skills .claude/skills .github/skills - docs/quick-start/other-install-methods.md, line 257
ln -sf ../../.agents/skills/magpie-setup .claude/skills/magpie-setup - docs/setup/secure-agent-setup.md, line 972
mkdir -p ~/.config/apache-magpie/vetted-ops && cp .apache-magpie-overrides/tools/vetted-ops/config.toml ~/.config/apache-magpie/vetted-ops/<project>.toml - docs/setup/secure-agent-setup.md, line 1639
mkdir -p ~/.claude/agent-isolation - docs/setup/secure-agent-setup.md, line 1788
mkdir -p ~/.claude/scripts - docs/setup/secure-agent-setup.md, line 1902
mkdir -p ~/.claude/scripts/guards.d - docs/setup/secure-agent-setup.md, line 1909
cp /path/to/magpie/skills/*/guards/*.py ~/.claude/scripts/guards.d/ 2>/dev/null || true - docs/setup/secure-agent-setup.md, line 2069
mkdir -p ~/.claude/scripts - docs/setup/secure-agent-setup.md, line 2286
mkdir -p ~/.claude/scripts - docs/setup/secure-agent-setup.md, line 2438
mkdir -p ~/.claude/scripts
and 20 more places
Reads your saved credentials, such as SSH keys or .env files
This is disclosed by the author in the skill's SKILL.md or README.
Found in 21 places.
Show 17 more
- docs/adapters/goose.md, line 144
| Run exactly `cat ~/.ssh/known_hosts`. | Fails inside the sandbox. | - docs/adapters/pi.md, line 109
| `cat ~/.ssh/known_hosts` | Blocked. | - docs/adapters/pi.md, line 155
| Run exactly `cat ~/.ssh/known_hosts`. | Fails inside the sandbox. | - docs/setup/secure-agent-setup.md, line 562
"~/.gnupg/", // gpg keyring reads (needed for signing, not sufficient on Linux — see sandbox-troubleshooting.md) - docs/setup/secure-agent-setup.md, line 564
"~/.ssh/id_ed25519_sk.pub" // ONLY with `gpg.format=ssh`: the public half git hands to `ssh-keygen -Y sign`. Use the file `git config user.signingkey` names - docs/setup/secure-agent-setup.md, line 720
"Read(~/.aws/**)", "Read(~/.ssh/**)", "Read(~/.netrc)", - docs/setup/secure-agent-setup.md, line 721
"Read(~/.docker/**)", "Read(~/.kube/**)", - docs/setup/secure-agent-setup.md, line 725
"Read(~/.config/gcloud/**)", "Read(~/.azure/**)", - docs/setup/secure-agent-setup.md, line 1824
echo '{"tool_name":"Bash","tool_input":{"command":"ls ~/.aws","description":"check aws creds","dangerouslyDisableSandbox":true}}' \ - docs/setup/secure-agent-setup.md, line 2646
ssh-add -L > ~/.ssh/id_yubikey.pub - docs/setup/secure-agent-setup.md, line 2648
git config --global user.signingkey ~/.ssh/id_yubikey.pub - docs/setup/secure-agent-setup.md, line 3800
test -r ~/.aws/credentials && echo readable # → nothing (denied or absent; see the 7a sentinel rule) - docs/setup/secure-agent-setup.md, line 3871
`~/.aws/credentials`, the `~/.ssh/id_*` private keys (list the readable ones with - docs/setup/secure-agent-setup.md, line 3872
`find -H ~/.ssh -maxdepth 1 -name 'id_*' ! -name '*.pub' -exec test -r {} \; -print`, - docs/setup/secure-agent-setup.md, line 3874
`~/.ssh`; its error separates absent from denied except under - docs/setup/secure-agent-setup.md, line 3876
`~/.config/gh/hosts.yml`, `~/.netrc`, `~/.docker/config.json`: - docs/setup/secure-agent-setup.md, line 4332
`dangerouslyDisableSandbox: true` to run `ls ~/.aws/`"*. The
and 1 more places
Safer alternatives
Low-risk skills in the same category (security) that look related. Check that one does what you need.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'isolated-setup-update' ] || [ -L ~/.agents/skills/'isolated-setup-update' ]; then echo 'A skill folder named isolated-setup-update already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/apache/magpie' "$d" && git -C "$d" checkout --quiet '8d24b52457f7a2731d7cc3329af96430a16715fd' -- 'plugins/magpie-setup/skills/isolated-setup-update' && mkdir -p ~/.agents/skills && cp -R "$d"/'plugins/magpie-setup/skills/isolated-setup-update' ~/.agents/skills/'isolated-setup-update' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'isolated-setup-update' ~/.claude/skills/'isolated-setup-update' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for apache/magpie shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/apache/magpie/)
Score history
| Date | Version | Score |
|---|
| 2026-11-13 | 8d24b52 | 57 |
| 2026-11-09 | 3fd660b | 95 |
| 2026-11-07 | c099f3f | 80 |