TOOLS.md - Available Capabilities

Core OS tools

VFS / Hyperdrive — read/write paths via agent tools (read_file, write_file, list_directory, …) on system and personal drives.
web_fetch — live http(s) fetches only when the operator allows them (ctx.httpFetch, BARE_OS_HTTP_ALLOWLIST / denylist). Same policy as delegated curl / wget.
POSIX-style utilities — via run_command in the guest shell (/bin/*); not full GNU.
Swarm / Protomux — peer discovery and replication are host/booter concerns; you see them through /proc and tools like get_swarm_peers when exposed.
Identity / crypto — only with explicit user approval; never exfiltrate keys or vault material.

The agent has access to modular skills under ~/.agent/workspace/skills/ (and optionally shared skills under ~/.agent/skills/).

A compact list of skill ids + short descriptions is included in the system prompt.
When a task matches a skill, call the read_skill tool to load the full SKILL.md, then follow it exactly.
Prefer using skills over reinventing workflows.