Skills env-and-assets-bootstrap
๐Ÿ“ฆ

env-and-assets-bootstrap

Content revision r2 Safe โš™๏ธ External commands๐Ÿ“ Filesystem access

Prepare Reproduction Environments and Assets

Research repositories often leave environment and asset requirements incomplete. This skill builds a conservative setup plan and records unresolved dependency and asset risks.

Supports: Claude Codex Code(CC)
๐Ÿฅˆ 80 Silver

This skill is part of a pack

Install the whole pack to get every skill the task needs, in one command.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "env-and-assets-bootstrap" from https://skillstore.io/skills/lllllllama-env-and-assets-bootstrap.md and its manifest at https://skillstore.io/api/skills/lllllllama-env-and-assets-bootstrap/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Test it

Using "env-and-assets-bootstrap". A repository with environment.yml, a declared environment name, and README checkpoint links.

Expected outcome:

  • Environment source: the documented conda file.
  • Environment name: the repository declaration.
  • Assets: checkpoint links and expected local paths.
  • Risk: checkpoint integrity remains unverified.

Using "env-and-assets-bootstrap". A repository with requirements.txt and no documented dataset location.

Expected outcome:

  • Environment approach: an isolated virtual environment with the documented requirements.
  • Assets: common dataset and cache directories are marked missing.
  • Unresolved risk: the required dataset source needs confirmation.

Using "env-and-assets-bootstrap". A repository without a supported environment specification.

Expected outcome:

The plan recommends an isolated virtual environment and records the missing dependency specification as an unresolved setup risk.

Security Audit

Safe
v7 โ€ข 8/8/2026 Open versioned report

Most static findings are false positives caused by Markdown backticks, conservative policy prose, or fixed shell wrapper operations. The bootstrapper performs real package installation, and SKILL.md references an instruction file outside the reviewed package boundary.

8
Files scanned
539
Lines analyzed
2
Review items
0
False positives ignored
Capability review items (2)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High
Python subprocess.run
subprocess.run(command, cwd=cwd, check=True)
This call executes environment creation and package installation commands unless dry-run is selected. Installing dependencies or an editable target repository can execute untrusted package or build code.
High
Path traversal sequence
`../../references/agent-operating-principles.md`; this skill should keep setup
The skill explicitly directs the agent through a parent-relative path to instructions outside the reviewed package. That crosses the package trust boundary and can import unreviewed directives.
Audited by: codex View Audit History โ†’
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/lllllllama-env-and-assets-bootstrap/audits/7?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/lllllllama-env-and-assets-bootstrap/security.svg)](https://skillstore.io/skills/lllllllama-env-and-assets-bootstrap?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/lllllllama-env-and-assets-bootstrap?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/lllllllama-env-and-assets-bootstrap/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/lllllllama-env-and-assets-bootstrap.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA ยท BibTeX ยท CFF)

APA citation

lllllllama. (2026). env-and-assets-bootstrap security audit report (audit version 7) [Author version unspecified]. Skillstore. https://skillstore.io/skills/lllllllama-env-and-assets-bootstrap/audits/7

BibTeX citation

@techreport{lllllllama-lllllllama-env-and-assets-bootstrap-2026, author = {lllllllama}, title = {env-and-assets-bootstrap security audit report (audit version 7)}, institution = {Skillstore}, year = {2026}, number = {7}, url = {https://skillstore.io/skills/lllllllama-env-and-assets-bootstrap/audits/7}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "env-and-assets-bootstrap security audit report (audit version 7)" version: "unspecified" type: report authors: - name: "lllllllama" date-released: "2026-08-08" url: "https://skillstore.io/skills/lllllllama-env-and-assets-bootstrap/audits/7" identifiers: - type: other value: "skillstore:lllllllama-env-and-assets-bootstrap:audit:7" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High
64
Architecture
85
Maintainability
87
Content
69
Community
83
Spec Compliance

What You Can Build

Prepare a Research Repository

Create an environment and asset plan before attempting a documented deep learning reproduction.

Standardize Reproduction Setup

Generate consistent setup notes and unresolved risk records across several research repositories.

Review Student Project Requirements

Identify missing dependencies, dataset locations, and checkpoint assumptions before supervised lab work begins.

Try These Prompts

Create a Setup Plan
Inspect [repository path]. Create a setup plan from its README and top-level environment files without executing commands.
Plan Required Assets
Prepare an asset manifest for [repository path] under [assets directory]. Record checkpoint, dataset, cache, source, path, and unresolved status.
Prepare a Dry Run
Prepare a dry-run environment plan for [repository path] on [operating system]. Prefer [manager] and use Python [version].
Audit Cross-Platform Setup
Audit [repository path] across [platforms]. Reconcile README instructions, environment metadata, asset paths, and execution risks before proposing commands.

Best Practices

  • Review every proposed command and dependency source before allowing installation.
  • Use dry-run mode first and keep the target repository inside an isolated workspace.
  • Verify dataset and checkpoint sources against the repository or primary paper.

Avoid

  • Do not treat discovered URLs or filenames as proof of trustworthy assets.
  • Do not execute setup scripts from an untrusted repository without isolation and review.
  • Do not infer successful reproduction from a completed environment setup.

Frequently Asked Questions

Does this skill download datasets or checkpoints?
No. It records source hints, expected paths, and status values for later review.
Which environment managers are supported?
The bootstrapper supports conda and mamba, with a Python virtual environment fallback.
Can I preview actions without installing packages?
Yes. Use dry-run mode to print planned bootstrap actions without executing them.
Which operating systems are covered?
The planning logic provides activation guidance for Windows, macOS, and Linux.
Does the skill validate dependency security?
No. You must review package sources, build scripts, and repository trust before installation.
Does this skill run or evaluate the experiment?
No. It prepares environment and asset assumptions before execution and does not assess results.

Developer Details

Author

lllllllama

License

MIT

Skillstore revision

r2

Version notice

The author did not declare a version.

Ref

656be3040aef5c047555a908cd5c695d22a4a548

Maintenance freshness

8/8/2026

Usage

11 downloads ยท 104 views

File structure

๐Ÿ“ agents/

๐Ÿ“„ openai.yaml

๐Ÿ“ references/

๐Ÿ“„ assets-policy.md

๐Ÿ“„ env-policy.md

๐Ÿ“ scripts/

๐Ÿ“„ bootstrap_env.py

๐Ÿ“„ bootstrap_env.sh

๐Ÿ“„ plan_setup.py

๐Ÿ“„ prepare_assets.py

๐Ÿ“„ SKILL.md

More from lllllllama

View all
View all