latchagent Skill Generator
The SkillGenerator class lives at src/main/services/skill-generator.ts and produces markdown skill files that are injected into agent sessions.
Two Types of Generated Skills
1. Enclave Meta-Skill
Generated by generateEnclaveMeta(services). Injected into every enclave session. Tells the agent:
- It's running in a security enclave
- All traffic is monitored
- Credentials are automatic
- What services are available
- Rules (no bypass, no exfiltration, respect blocks)
2. Service Skills
Generated by generateServiceSkill(service). One per registered service. Tells the agent:
- What capabilities it has (e.g.,
gh pr create,aws s3 ls) - That auth is automatic — do NOT ask for tokens
- Service-specific constraints
- Not to modify auth config files
Architecture Notes
- Skills are markdown strings — they get written to
.claude/skills/or equivalent harness discovery paths - SkillGenerator is stateless — it takes ServiceDefinition[] and returns strings
- The enclave manager or session startup code is responsible for writing these to disk
- Skills are regenerated each session (not cached) to reflect current service grants
Testing
Tests: src/main/services/skill-generator.test.ts
Run: npx vitest run src/main/services/skill-generator.test.ts