How do I install the Rmagent Core skill?

Run npx skillmds@latest add drolu/rmagent-core in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Rmagent Core safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Rmagent Core?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Rmagent Core free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Rmagent Core?

DrOlu (@drolu) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Rmagent Core by drolu — Agent Skill

Name: Rmagent Core
Author: DrOlu

Rmagent Core

Shared lake-less engine for every rmagent-* skill — grain ALLOWED maps, case paths under ~/.rmagent, and the thin loader other skills import so they do not vendor a second lib.py. Not a witness. Load rmagent-so / linux / at to ask boxes.

DrOlu 8540498 8 files · 42.0 KB Updated Sep 17, 2026

File contents

rmagent-core — shared engine, not a witness

This skill is the one engine the family imports. It has no door and no payloads. Questions live in the grain skills. Cases, baselines, census history, silent-host book, actuate journal, and drill history live under ~/.rmagent/ — never inside a skill checkout.

Constitution

Watch only (Phase 0) in question skills. Actuate is a separate skill.
Allowlisted questions only. Grain firewall: a skill may only ask its grain.
Capped answers (32 KB). Oversized → hole.
A hole is an answer.
Never trust “no findings” until attest/blind_check can see.
On-device rings, not shipped lakes. Jump host stores cases (megabytes).
Context propagates; data does not.
Credentials never in inventory / skill / case.
Your estate only.
No tight retry on a silent host.
Secrets / PAN / prompt text never stored unless masked.
Persistent rings are MOP, dry-run default, --apply + --teardown.
Honest fidelity gaps.
Keep the existing sensor.

Grain firewall (`scripts/grains.py`)

Skill	Grain	ALLOWED
rmagent-so / windows	principal + LogonId	identity questions
rmagent-linux	principal (root)	attest sketch edges explain attackmap
rmagent-at	request-ish	apptrace appslow apperrors appnet appproc appsysmon
rmagent-ao	host, agent, session	agents agentstate agenttrace agentnet agentmodels agentdrift agentdeep
rmagent-fr	ticket	none — records cases, does not ask boxes
rmagent-iso	STAN+RRN wire	txnattest txntrace txnhops txnslow txnfail txnbaseline
rmagent-pay	STAN+RRN diary	pay_attest switch_txn core_auth pay_sketch hop_delta

App questions are not legal on so. Identity questions are not legal on at. fr has an empty allowlist.

Paths (`scripts/paths.py`)

~/.rmagent/cases/
~/.rmagent/baselines/
~/.rmagent/census_history.jsonl
~/.rmagent/silent.json
~/.rmagent/actuate.jsonl
~/.rmagent/drill/
~/.rmagent/creds.json

Loader (`scripts/loader.py`)

Other skills load the canonical so engine with spec_from_file_location (never sys.path + import lib). Then they replace ALLOWED with their grain set.

Will not do

Ask a box.
Copy Security.evtx / pcap / ETL home.
Grow without bound. Cases prune raw answers on close.

---name: rmagent-coredescription: Shared lake-less engine for every rmagent-* skill — grain ALLOWED maps, case paths under ~/.rmagent, and the thin loader other skills import so they do not vendor a second lib.py. Not a witness. Load rmagent-so / linux / at to ask boxes.---# rmagent-core — shared engine, not a witnessThis skill is the **one engine** the family imports. It has no door and nopayloads. Questions live in the grain skills. Cases, baselines, censushistory, silent-host book, actuate journal, and drill history live under`~/.rmagent/` — never inside a skill checkout.## Constitution1. Watch only (Phase 0) in question skills. Actuate is a separate skill.2. Allowlisted questions only. Grain firewall: a skill may only ask its grain.3. Capped answers (32 KB). Oversized → hole.4. A hole is an answer.5. Never trust “no findings” until attest/blind_check can see.6. On-device rings, not shipped lakes. Jump host stores **cases** (megabytes).7. Context propagates; data does not.8. Credentials never in inventory / skill / case.9. Your estate only.10. No tight retry on a silent host.11. Secrets / PAN / prompt text never stored unless masked.12. Persistent rings are MOP, dry-run default, `--apply` + `--teardown`.13. Honest fidelity gaps.14. Keep the existing sensor.## Grain firewall (`scripts/grains.py`)| Skill | Grain | ALLOWED ||---|---|---|| rmagent-so / windows | principal + LogonId | identity questions || rmagent-linux | principal (root) | attest sketch edges explain attackmap || rmagent-at | request-ish | apptrace appslow apperrors appnet appproc appsysmon || rmagent-ao | host, agent, session | agents agentstate agenttrace agentnet agentmodels agentdrift agentdeep || rmagent-fr | ticket | **none** — records cases, does not ask boxes || rmagent-iso | STAN+RRN wire | txnattest txntrace txnhops txnslow txnfail txnbaseline || rmagent-pay | STAN+RRN diary | pay_attest switch_txn core_auth pay_sketch hop_delta |App questions are **not** legal on so. Identity questions are **not** legal on at.fr has an empty allowlist.## Paths (`scripts/paths.py`)```~/.rmagent/cases/~/.rmagent/baselines/~/.rmagent/census_history.jsonl~/.rmagent/silent.json~/.rmagent/actuate.jsonl~/.rmagent/drill/~/.rmagent/creds.json```## Loader (`scripts/loader.py`)Other skills load the canonical so engine with `spec_from_file_location`(never `sys.path` + `import lib`). Then they **replace `ALLOWED`** with theirgrain set.## Will not do- Ask a box.- Copy Security.evtx / pcap / ETL home.- Grow without bound. Cases prune raw answers on close.

Frequently asked questions