jonny (nonvenomous) on Nostr: so muse wants to make git repositories of everything, is that a crime? added to the ...

so muse wants to make git repositories of everything, is that a crime? added to the skill text of muse's github connector skill is this desperate plea to "only use the github connector rather than using git with shell commands." Instead they are to follow this convoluted set of commands to prepare a manifest so that it can be inspected by the security layer. It is then instructed to recreate git by generating raw json into a file (which is is *terrible at*).

muse has not noticed and continues to make my scheduled pushes of snapshots of its client source, skills, and binaries on the hour, in part because there is a whole other system that um evades the entire agent cron system that all this "skill-based security" relies on. it is um undocumented but easily discoverable, so easily discoverable i get to say the line again - it is certainly expected behavior.

https://github.com/sneakers-the-rat/muse-skills/commit/6eabcda5ca8f398acc13729859c9f4e4e80d3d12