What a skill is allowed to do — declared, not assumed
Every skill ships as a signed manifest: what it can do, what it cannot, the tools it calls and the paths it may read — checked before it is trusted with a single command.
The catalogue
Skills ship with the release, come from AcTree's signed skill catalogue, or are your own uploads, and each workspace enables or disables each one.
- Active Directory Investigation
- Exchange Server Triage
- File Provenance
- Identity, DNS and EDR
- Infrastructure Incident RCA
- Kubernetes Cluster Triage
- Linux Host Triage
- Network and Firewall Triage
- Storage and Filesystem Triage
- Virtualization Platform Triage
- Windows Host Triage
The manifest
Can
- Read the effective sshd configuration
- Inspect include files
- Inspect the authentication policy
- Check listening interfaces
- Check the host firewall
- Compare against a baseline
Cannot
- Read arbitrary home directories
- Read application secrets
- Upload files
- Modify configuration
- Establish arbitrary network connections
Tools
sshd · systemctl · ss · grep · cat
Allowed paths
/etc/ssh/** · /etc/pam.d/** · /var/log/auth.log
Each skill is a versioned package. Uploads are checked before they install, every version is archived, and each workspace enables or disables each skill.
How a skill is approved
- Draft
- Static validation
- Sandbox
- AI red team
- Owner review
- Security approval
- Published
Execution follows the configured host policy. A command can be approved, denied or referred for human review; individual approval depends on that policy.
Employee-authored skills
Anyone in the organization can write a skill for their own team and put it through the same lifecycle before it is allowed to run.
What a skill is allowed to do