{"id":"agy-native","name":"agy-native","summary":"1つのパケットまたは新しいバリデータコンテキストに対して明示的に選択されたAGYランタイムを使用します。","body":"# AGY Native\n\nUse AGY only when the caller explicitly selects that runtime. Discover its live\ncommand surface with `agy --help` (and `agy models` for the current model set)\nbefore acting, and scope every session to the supplied workspace and packet.\n\nDiscovering the live command surface before acting works because AGY's CLI\nchanges faster than any skill text: a remembered flag is a guess, while a\nfreshly listed one is evidence.\n\n## Permission posture (disclose it; never assume it)\n\nThe posture a run gets is chosen by flags, so name it explicitly:\n\n- Default `agy` runs interactively and prompts for each tool permission.\n- `--dangerously-skip-permissions` auto-approves every tool call — use it only\n  when the packet's declared effects and the caller's authorization cover that\n  blast radius.\n- `--sandbox` restricts the session's terminal access.\n- Print mode (`agy -p` / `--print`) is the sanctioned headless path and carries\n  a built-in `--print-timeout` (default 5m); a run that exceeds it is killed and\n  reported as timed out, not as a result.\n\nA reader who sets none of these gets AGY's interactive default, not a scoped\nrun. Match the posture to the declared effects and disclose which one was used.\n\n## When AGY is unavailable\n\nIf `agy` is not installed or its command surface cannot be discovered, report the\nabsence as a disclosed fact and stop. Do not fall back to another runtime, do not\nguess a command surface, and never route through `claude -p`.\n\nNamed failure mode — **wrapper drift**: invoking AGY through remembered\nsyntax that silently changed, producing runs that look scoped but are not.\n\nAnti-pattern: reusing one AGY session for both author and validator roles\nbecause starting a second session is slower. Corrective: keep the identities\ndistinct; a shared session forfeits the fresh-judgment guarantee that makes\nthe validator's evidence usable.\n\n- Keep author and validator sessions distinct when AGY supplies both roles.\n- Persist the runtime conversation/context identity and artifact references.\n- Validators remain read-only and hand judgment to Validate; they do not write\n  the core verdict directly.\n- AGY plugin, memory, permission, retry, and session state remain substrate facts\n  and never become AgentOps phase, queue, or completion state.\n- Never invoke `claude -p` through an AGY wrapper.\n\nReturn evidence to the caller and stop. Installation, plugin mutation, and\nrecurring scheduling require separate explicit authorization.","author":"@boshu2","ownerProfile":null,"authorContacts":null,"sourceUrl":"https://github.com/boshu2/agentops/tree/main/images/gemini/skills/agy-native","license":"Apache-2.0","category":"document","lang":"en","tokens":540,"stars":0,"calls30d":1,"claimed":false,"visibility":"public","origin":"crawler","version":"0.1.0","createdAt":"2026-08-22","updatedAt":"2026-08-22","files":[],"requires":{"mcp":[],"tools":[]},"safety":{"flags":[{"code":"injection.disable-permissions","kind":"injection","where":"SKILL.md:16","excerpt":"--dangerously-skip-permissions","message":"instructs the agent to disable permission checks","severity":"warn"}],"scannedAt":"2026-08-22","hasScripts":false,"networkEndpoints":[]}}