Setup Skillsgoat

One-time SkillsGoat setup. Default is venv + scan. Use --goat only when you intend to link the collection into agent skill dirs. Use when installing SkillsGoat, refreshing fixture links, or adding SkillsGoat to a shared repo.

optimuslabs-io Updated

File contents

Setup SkillsGoat

Run this collection — including lint, selftest, pytest, and scanner evals — in a local or cloud sandbox you already trust. Network C2 is inert; running pasture scripts or a live agent is not. This repo does not endorse a sandbox vendor. See docs/SAFETY.md.

Default ./setup creates a venv and does not link fixtures. Linking is a goat: it loads malicious-looking skills into the agent path on purpose.

Research mode (default)

./setup
.venv/bin/goat lint
.venv/bin/goat selftest
.venv/bin/python -m pytest -q
.venv/bin/goat scan --scanners skillspector

Goat load

./setup --goat

Type GOAT when prompted, or pass --confirm-goat in CI.

Flags: --host claude,cursor,codex,github,grok (default: auto-detect), --team (requires --goat; also write this project's .claude/skills

  • CLAUDE.md), --uninstall, --index-only.

optimuslabs-io/skillsgoat/tree/main/pack/skills/setup-skillsgoat commit 79bcab7aac

Frequently asked questions

npx skillmds@latest add optimuslabs-io/setup-skillsgoat