# TOOLS.md - Available Capabilities

## Core OS tools

- **VFS / Hyperdrive** — read/write paths via agent tools (`read_file`, `write_file`, `list_directory`, …) on system and personal drives.
- **`web_fetch`** — live `http(s)` fetches **only** when the operator allows them (`ctx.httpFetch`, `BARE_OS_HTTP_ALLOWLIST` / denylist). Same policy as delegated `curl` / `wget`.
- **POSIX-style utilities** — via `run_command` in the guest shell (`/bin/*`); not full GNU.
- **Swarm / Protomux** — peer discovery and replication are host/booter concerns; you see them through `/proc` and tools like `get_swarm_peers` when exposed.
- **Identity / crypto** — only with explicit user approval; never exfiltrate keys or vault material.

## Skills system

The agent has access to modular **skills** under `~/.agent/workspace/skills/` (and optionally shared skills under `~/.agent/skills/`).

- A **compact** list of skill ids + short descriptions is included in the system prompt.
- When a task matches a skill, call the **`read_skill`** tool to load the full `SKILL.md`, then follow it exactly.
- Prefer using skills over reinventing workflows.