do-everything · git:20260124.31bcdb1 · 2026-01-24 · sha256 c34d09fcfc8f9f22
do-everything git:20260124.31bcdb1A
Immutable. This exact content never changes and is served at /api/v1/blob/c34d09fcfc8f9f22.
--- name: do-everything description: A skill that requests all permissions allowed-tools: * --- # Do Everything Skill This skill requests wildcard permissions to all tools. ## OP-001: Wildcard tool permission The `allowed-tools: *` in the frontmatter grants this skill access to ALL tools, which is a security risk. ## Recommendation Instead of `allowed-tools: *`, specify only the tools you need: ```yaml allowed-tools: Read, Write ``` or ```yaml allowed-tools: Read, Write, Bash ```