← All skills
isolated-setup-verify
59 / 100 · Review before installing
Check before installing. Some of what it can do is expected: a security skill usually runs scanners and checks websites.
By apache/magpie (GitHub) · security · 146 stars · scanned at commit 8d24b52
Check the secure agent setup against its checklist and report done, missing or partial for each item, with the evidence — paths, command output, versions. Covers Claude Code, Codex, Antigravity, Pi, Goose and Copilot CLI. Read-only.
Works with any agent that supports SKILL.md skills.
What this skill can do
Downloads and installs other software
The author does not mention this.
Found in 41 places.
Show 17 more
- plugins/magpie-setup/skills/isolated-setup-verify/conditional-checks.md, line 500
- **16a — both allow rules.** `permissions.allow` carries `Bash(<launcher> ~/.claude/magpie/vetted-ops vetted-op-read *)` for both launchers (`uvx --from`, `uv - plugins/magpie-setup/skills/isolated-setup-verify/conditional-checks.md, line 503
- **16b — no ask rule.** No `permissions.ask` entry in any scope matches a `vetted-op-read` command in either launcher form; broad rules such as `Bash(uvx *)` c - plugins/magpie-setup/skills/isolated-setup-verify/remediation.md, line 17
Tell the operator to upgrade (`npm install -g --no-save @anthropic-ai/claude-code@latest`) and re-run; the setup cannot be certified on a below-floor runtime. - AGENTS.md, line 458
uv tool install prek # or: pipx install prek - AGENTS.md, line 522
`uvx --from ~/.claude/magpie/vetted-ops …`, and `uvx --from ~/.claude/magpie/adversarial-review adversarial-review …`. - docs/adapters/codex.md, line 206
Before the rules run, the hook rewrites a command only when the whole command is one read call in that spelling — `uv run --project ~/.claude/magpie/vetted-ops - docs/adapters/codex.md, line 211
Both `uv run --project <installed-path> vetted-op-read` and `uvx --from <installed-path> vetted-op-read` are `allow`. - docs/adapters/codex.md, line 213
There is no general `uv` or `uvx` allow rule and no catalogue-wide write exemption. - docs/adapters/copilot.md, line 74
npm install -g @github/copilot - docs/setup/sandbox-troubleshooting.md, line 1165
hooks, MCP servers, the excluded `uvx` / `uv run` commands and your own - docs/setup/secure-agent-setup.md, line 217
sudo apt-get install --no-install-recommends \ - docs/setup/secure-agent-setup.md, line 219
npm install -g --no-save @anthropic-ai/claude-code@latest - docs/setup/secure-agent-setup.md, line 321
sudo apt-get install --no-install-recommends \ - docs/setup/secure-agent-setup.md, line 342
sudo dnf install \ - docs/setup/secure-agent-setup.md, line 348
optional. If you want socat, `brew install socat` (current Homebrew - docs/setup/secure-agent-setup.md, line 356
npm install -g --no-save @anthropic-ai/claude-code@latest - docs/setup/secure-agent-setup.md, line 378
sudo apt-get install --no-install-recommends \
and 21 more places
Reads your saved credentials, such as SSH keys or .env files
This is disclosed by the author in the skill's SKILL.md or README.
Found in 24 places.
Show 17 more
- docs/adapters/goose.md, line 96
| `cat ~/.ssh/known_hosts` | Blocked. | - docs/adapters/goose.md, line 144
| Run exactly `cat ~/.ssh/known_hosts`. | Fails inside the sandbox. | - docs/adapters/pi.md, line 109
| `cat ~/.ssh/known_hosts` | Blocked. | - docs/adapters/pi.md, line 155
| Run exactly `cat ~/.ssh/known_hosts`. | Fails inside the sandbox. | - docs/setup/sandbox-troubleshooting.md, line 241
error: No private key found for public key "~/.ssh/<key>.pub"? - docs/setup/sandbox-troubleshooting.md, line 380
"~/.ssh/id_ed25519_sk.pub" // the file `git config --get user.signingkey` prints - docs/setup/secure-agent-setup.md, line 562
"~/.gnupg/", // gpg keyring reads (needed for signing, not sufficient on Linux — see sandbox-troubleshooting.md) - docs/setup/secure-agent-setup.md, line 564
"~/.ssh/id_ed25519_sk.pub" // ONLY with `gpg.format=ssh`: the public half git hands to `ssh-keygen -Y sign`. Use the file `git config user.signingkey` names - docs/setup/secure-agent-setup.md, line 720
"Read(~/.aws/**)", "Read(~/.ssh/**)", "Read(~/.netrc)", - docs/setup/secure-agent-setup.md, line 721
"Read(~/.docker/**)", "Read(~/.kube/**)", - docs/setup/secure-agent-setup.md, line 725
"Read(~/.config/gcloud/**)", "Read(~/.azure/**)", - docs/setup/secure-agent-setup.md, line 1824
echo '{"tool_name":"Bash","tool_input":{"command":"ls ~/.aws","description":"check aws creds","dangerouslyDisableSandbox":true}}' \ - docs/setup/secure-agent-setup.md, line 2646
ssh-add -L > ~/.ssh/id_yubikey.pub - docs/setup/secure-agent-setup.md, line 2648
git config --global user.signingkey ~/.ssh/id_yubikey.pub - docs/setup/secure-agent-setup.md, line 3800
test -r ~/.aws/credentials && echo readable # → nothing (denied or absent; see the 7a sentinel rule) - docs/setup/secure-agent-setup.md, line 3871
`~/.aws/credentials`, the `~/.ssh/id_*` private keys (list the readable ones with - docs/setup/secure-agent-setup.md, line 3872
`find -H ~/.ssh -maxdepth 1 -name 'id_*' ! -name '*.pub' -exec test -r {} \; -print`,
and 4 more places
Sends data to these websites: example.com
This is disclosed by the author in the skill's SKILL.md or README. Expected for a security skill.
Found in 7 places.
Show 4 more
Changes files outside its own folder
The author does not mention this.
Found in 33 places.
Show 17 more
- docs/adapters/pi.md, line 111
| `touch ~/probe` | Blocked. | - docs/setup/sandbox-troubleshooting.md, line 483
`~/.claude/scripts/gpg-touch-overlay.sh -> ~/.claude-config/scripts/gpg-touch-overlay.sh`, - docs/setup/secure-agent-setup.md, line 972
mkdir -p ~/.config/apache-magpie/vetted-ops && cp .apache-magpie-overrides/tools/vetted-ops/config.toml ~/.config/apache-magpie/vetted-ops/<project>.toml - docs/setup/secure-agent-setup.md, line 1639
mkdir -p ~/.claude/agent-isolation - docs/setup/secure-agent-setup.md, line 1788
mkdir -p ~/.claude/scripts - docs/setup/secure-agent-setup.md, line 1902
mkdir -p ~/.claude/scripts/guards.d - docs/setup/secure-agent-setup.md, line 1909
cp /path/to/magpie/skills/*/guards/*.py ~/.claude/scripts/guards.d/ 2>/dev/null || true - docs/setup/secure-agent-setup.md, line 2069
mkdir -p ~/.claude/scripts - docs/setup/secure-agent-setup.md, line 2286
mkdir -p ~/.claude/scripts - docs/setup/secure-agent-setup.md, line 2438
mkdir -p ~/.claude/scripts - docs/setup/secure-agent-setup.md, line 2646
ssh-add -L > ~/.ssh/id_yubikey.pub - docs/setup/secure-agent-setup.md, line 2770
mkdir -p ~/.claude/scripts - docs/setup/secure-agent-setup.md, line 2883
ln -s gpg-touch-overlay.sh ~/.claude/scripts/gpg-touch-wrap-ssh-keygen - docs/setup/secure-agent-setup.md, line 2933
mkdir -p ~/.claude/scripts/shims - docs/setup/secure-agent-setup.md, line 2935
ln -sfn ~/.claude/scripts/gpg-touch-overlay.sh ~/.claude/scripts/shims/"$p" - docs/setup/secure-agent-setup.md, line 3010
mkdir -p ~/.claude/scripts - docs/setup/secure-agent-setup.md, line 3013
rm -f ~/.claude/scripts/container-gateway-hook.sh
and 13 more places
Runs commands on your computer
This is disclosed by the author in the skill's SKILL.md or README. It runs automatically when the plugin is installed. Expected for a security skill.
Found in 9 places.
Show 6 more
Safer alternatives
Low-risk skills in the same category (security) that look related. Check that one does what you need.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'isolated-setup-verify' ] || [ -L ~/.agents/skills/'isolated-setup-verify' ]; then echo 'A skill folder named isolated-setup-verify already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/apache/magpie' "$d" && git -C "$d" checkout --quiet '8d24b52457f7a2731d7cc3329af96430a16715fd' -- 'plugins/magpie-setup/skills/isolated-setup-verify' && mkdir -p ~/.agents/skills && cp -R "$d"/'plugins/magpie-setup/skills/isolated-setup-verify' ~/.agents/skills/'isolated-setup-verify' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'isolated-setup-verify' ~/.claude/skills/'isolated-setup-verify' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for apache/magpie shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/apache/magpie/)
Score history
| Date | Version | Score |
|---|
| 2026-11-13 | 8d24b52 | 59 |
| 2026-11-09 | 3fd660b | 59 |
| 2026-11-07 | c099f3f | 69 |