Skill discovery mechanism that rejects symlinks resolving outside the home or workspace root, specifically impacting Nix-managed skills.
Raw Developer Origin & Technical Request
GitHub Issue
Aug 19, 2026
## Summary
fx follows symlinks inside skill directories, but rejects any link whose resolved target falls outside the home directory (or workspace root). When a CLI tool installed via Nix provides skills, the actual files live under `/nix/store/...` and only a symlink is placed at `~/.claude/skills/` (or similar). fx cannot discover or load these skills.
## Steps to reproduce
1. Install a CLI tool via Nix that ships skills (e.g. [hunk](github.com/modem-dev/hunk
2. The tool creates a symlink at `~/.claude/skills/` pointing to `/nix/store/...`
3. Start fx
4. The skill is not recognized
## Expected behavior
Skills reachable via symlinks that point outside home (e.g. to the Nix store) should still be discovered and loaded.
## Actual behavior
The skill is skipped during discovery and does not appear in the catalog.
## Root cause
The `openContainedDir` function introduced in [#83](github.com/vercel-labs/fx/pu... (`src/core/skills/skill_runtime.zig`) resolves symlinks via `realpathAlloc` and then checks `pathInside(read_authority, canonical_path)`. When the resolved target is outside `read_authority` (home or workspace_root), it returns `PathOutsideReadAuthority` and the candidate is skipped.
Additionally, `root_policy` is hardcoded in `src/builtins/skills.zig`. There is no setting or environment variable to relax this boundary.
## Affected use cases
- Users managing skills via Nix / home-manager
- Skills installed with `npx skills add` w...
Developer Debate & Comments
No active discussions extracted for this entry yet.
Adjacent Repository Pain Points
Other highly discussed features and pain points extracted from vercel-labs/fx.
Frequently Asked Questions
Market intelligence mapped to Skill discovery mechanism that rejects symlinks resolving outside the home or workspace root, specifically impacting Nix-managed skills..
How is Skill discovery mechanism that rejects symlinks resolving outside the home or workspace root, specifically impacting Nix-managed skills. positioned in the market?
What is the general sentiment around Skill discovery mechanism that rejects symlinks resolving outside the home or workspace root, specifically impacting Nix-managed skills.?
Which technical concepts are associated with Skill discovery mechanism that rejects symlinks resolving outside the home or workspace root, specifically impacting Nix-managed skills.?
Engagement Signals
Cross-Market Term Frequency
Quantifies the cross-market adoption of foundational terms like hardcoded and npx skills add by tracking occurrence frequency across active SaaS architectures and enterprise developer debates.
SaaS Metrics