The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill manages the installation of official command-line tools from well-known service providers.
Fetches the Heroku CLI installation script from Heroku's official assets domain.
Installs vercel, @railway/cli, and netlify-cli via the npm registry.
[COMMAND_EXECUTION]: The skill executes shell commands for tool installation and deployment automation.
The scripts/deploy.py script uses subprocess.run with shell=True to facilitate the installation of global CLI packages.
Executes npm run deploy when a custom deployment script is detected within a project's package.json file.
[REMOTE_CODE_EXECUTION]: Executes official installation scripts from remote sources.
Piped execution pattern: curl https://cli-assets.heroku.com/install.sh | sh is used to install the Heroku CLI, which is the standard procedure provided by the vendor.
[PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection through project configuration files.
Ingestion points: The scripts/deploy.py script reads and processes the package.json file from the user-specified project directory.
Boundary markers: None; the script automatically adopts the command specified in the deploy script field.
Capability inventory: The script has the capability to execute arbitrary shell commands via subprocess.run as part of the deployment workflow.
Sanitization: No validation or sanitization is performed on the content of the deploy script before execution, which is inherent to the functionality of a deployment wrapper.

deployment-automation