AgentStack
SKILL verified Apache-2.0 Self-run

Write Code Portfolio

skill-urmzd-dotfiles-write-code-portfolio · by urmzd

>

No reviews yet
0 installs
13 views
0.0% view→install

Install

$ agentstack add skill-urmzd-dotfiles-write-code-portfolio

✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution Used
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README — it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-urmzd-dotfiles-write-code-portfolio)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
26d ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming — see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps — measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Write Code Portfolio? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Portfolio Dev Setup

Personal, opinionated tooling that backs the patterns in write-code. This is not portable. Other users on Bitwarden + asdf + bash will not want any of this.

Composable Toolsets (Nix Flakes)

13 reusable per-language shells combined via flake.nix outputs. Each shell pins a single toolchain (rust-toolchain, go, node, python with uv, etc.). Projects compose the shells they need; nothing pollutes the global env.

  • Each language shell exposes a devShell and a lib.tools set for downstream composition
  • Avoid nix-direnv here -- vanilla direnv + a use flake line keeps cold-start fast and predictable on macOS

Machine Polymorphism (chezmoi)

Dotfile templates branch on host attributes:

{{ if .is_macos -}}
# macOS-only block (Homebrew bundle, defaults write, ...)
{{ end -}}

{{ if and .is_personal (not .is_work) -}}
# personal-only block (1Password personal vault, side projects, ...)
{{ end -}}

Attributes come from .chezmoi.toml.tmpl (is_macos, is_linux, is_personal, is_work). Keep templates small and the booleans flat; deeply nested {{ if }} blocks are a smell.

Powerlevel10k

Zsh prompt with instant prompt enabled and cache invalidation tied to plugin dir mtime. Source of truth: dot_p10k.zsh in the chezmoi source. Avoid editing the rendered ~/.p10k.zsh directly -- it is overwritten on next chezmoi apply.

Neovim (HEAD)

Lua config under private_dot_config/nvim/. Highlights:

  • LSP set: ty, ts_ls, lua_ls, gopls, rust_analyzer, jsonls, yamlls, bashls, jdtls
  • Subprocess-safe: detects non-interactive sessions and disables clipboard provider (so nvim -c '...' +q in scripts doesn't hang on macOS pbcopy)
  • Plugin manager: lazy.nvim, pinned via lazy-lock.json
  • 24-hour compinit cache; auto fpath discovery picks up new completions on next shell start

Why split this out

The portable write-code skill answers "what should this codebase look like?" That question is the same for everyone in the org. This skill answers "how is my personal machine wired up?" -- a question only I should be making decisions for, so the router shouldn't pick it for general code-writing requests.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet — be the first.

Versions

  • v0.1.0 Imported from the upstream source.