Install
$ agentstack add skill-urmzd-dotfiles-write-code-portfolio ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ● Shell / process execution Used
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README — it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming — see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps — measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Portfolio Dev Setup
Personal, opinionated tooling that backs the patterns in write-code. This is not portable. Other users on Bitwarden + asdf + bash will not want any of this.
Composable Toolsets (Nix Flakes)
13 reusable per-language shells combined via flake.nix outputs. Each shell pins a single toolchain (rust-toolchain, go, node, python with uv, etc.). Projects compose the shells they need; nothing pollutes the global env.
- Each language shell exposes a
devShelland alib.toolsset for downstream composition - Avoid
nix-direnvhere -- vanilla direnv + ause flakeline keeps cold-start fast and predictable on macOS
Machine Polymorphism (chezmoi)
Dotfile templates branch on host attributes:
{{ if .is_macos -}}
# macOS-only block (Homebrew bundle, defaults write, ...)
{{ end -}}
{{ if and .is_personal (not .is_work) -}}
# personal-only block (1Password personal vault, side projects, ...)
{{ end -}}
Attributes come from .chezmoi.toml.tmpl (is_macos, is_linux, is_personal, is_work). Keep templates small and the booleans flat; deeply nested {{ if }} blocks are a smell.
Powerlevel10k
Zsh prompt with instant prompt enabled and cache invalidation tied to plugin dir mtime. Source of truth: dot_p10k.zsh in the chezmoi source. Avoid editing the rendered ~/.p10k.zsh directly -- it is overwritten on next chezmoi apply.
Neovim (HEAD)
Lua config under private_dot_config/nvim/. Highlights:
- LSP set:
ty,ts_ls,lua_ls,gopls,rust_analyzer,jsonls,yamlls,bashls,jdtls - Subprocess-safe: detects non-interactive sessions and disables clipboard provider (so
nvim -c '...' +qin scripts doesn't hang on macOS pbcopy) - Plugin manager: lazy.nvim, pinned via
lazy-lock.json - 24-hour
compinitcache; auto fpath discovery picks up new completions on next shell start
Why split this out
The portable write-code skill answers "what should this codebase look like?" That question is the same for everyone in the org. This skill answers "how is my personal machine wired up?" -- a question only I should be making decisions for, so the router shouldn't pick it for general code-writing requests.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: urmzd
- Source: urmzd/dotfiles
- License: Apache-2.0
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.