From 554d6167c6a63ad069566696cbd7eab926edabbf Mon Sep 17 00:00:00 2001
From: Daniel Vaughn <danielbvaughn@gmail.com>
Date: Wed, 30 Sep 2026 15:24:02 -0400
Subject: [PATCH] adds dependency path

---
 capabilities/web-security/capability.yaml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/capabilities/web-security/capability.yaml b/capabilities/web-security/capability.yaml
index d019a3f..8a4bca3 100644
--- a/capabilities/web-security/capability.yaml
+++ b/capabilities/web-security/capability.yaml
@@ -143,6 +143,16 @@ dependencies:
     - "stegano>=0.11"
   scripts:
     - scripts/install_tools.sh
+  # Shared directories that install_tools.sh drops CLI tools into. The runtime
+  # appends these to PATH (after the image's own PATH, so the platform's
+  # verified tools win) for install scripts, preflight checks, MCP subprocesses,
+  # and the agent's shell tools — including under `dreadnode serve` off-platform.
+  # Keep in sync with the `export PATH` in scripts/install_tools.sh.
+  path:
+    - $HOME/.pdtm/go/bin
+    - $HOME/go/bin
+    - $HOME/.local/bin
+    - /usr/local/go/bin
 
 checks:
   - name: pd-tool-resolver