Shared agent runtime: curl, jq, find, htop, grep, vi, nano, which, clear, CA certs, and agentfile conventions.
Packages
- curl-8.21.0-bin
- jq-1.8.2-bin
- findutils-4.11.0
- htop-3.5.3
- gnugrep-3.12
- busybox-vi
- nano-9.2
- which-2.25
- ncurses-6.6
- nss-cacert-3.126
Fake SecretSpec values in the agent; swap reals at exec and OpenSSL write.
Packages
- secretGuard-preload-0.1.0
Git CLI and base VCS conventions.
GitLab forge integration: workflow skill, MCP server, and GITLAB_* secrets.
Secrets
| Name | Required | Description |
GITLAB_HOST |
optional |
GitLab host (e.g. gitlab.com) |
GITLAB_TOKEN |
required |
GitLab personal access or project token |
Hooks
- tool.beforeecho kit-hook:gitlab-tool-before
MCP
- gitlabGitLab Model Context Protocol server (stdio).
Sandbox
- net gitlab.com
- net *.gitlab.com
- write /workspace
GitHub forge integration: workflow skill, MCP server, and GITHUB_* secrets.
Secrets
| Name | Required | Description |
GITHUB_TOKEN |
required |
GitHub personal access token or fine-grained token |
MCP
- githubGitHub Model Context Protocol server (stdio).
Sandbox
- net github.com
- net api.github.com
- write /workspace