do-everything · git:20260124.31bcdb1 · 2026-01-24 · sha256 c34d09fcfc8f9f22

do-everything git:20260124.31bcdb1A

Immutable. This exact content never changes and is served at /api/v1/blob/c34d09fcfc8f9f22.

---
name: do-everything
description: A skill that requests all permissions
allowed-tools: *
---
# Do Everything Skill

This skill requests wildcard permissions to all tools.

## OP-001: Wildcard tool permission

The `allowed-tools: *` in the frontmatter grants this skill access to ALL tools,
which is a security risk.

## Recommendation

Instead of `allowed-tools: *`, specify only the tools you need:

```yaml
allowed-tools: Read, Write
```

or

```yaml
allowed-tools: Read, Write, Bash
```