The Agent Skills Directory

[SAFE]: The skill is designed as a template generator for DevOps workflows and prioritizes security best practices throughout its instructions and examples. It explicitly warns against hardcoding secrets, encourages the use of non-root users in containers, and promotes the use of security scanning tools.
[EXTERNAL_DOWNLOADS]: The generated CI/CD and Docker templates reference official and well-known services and tools. These include official GitHub Actions from Docker (docker/build-push-action), Slack (slackapi/slack-github-action), Aqua Security (aquasecurity/trivy-action), and GitHub itself (actions/checkout). These references are documented as part of the intended deployment functionality.
[COMMAND_EXECUTION]: The skill provides templates that include standard development and deployment commands (e.g., npm ci, docker compose, ssh). These commands are intended for the user to execute within their own environment as part of a standard DevOps pipeline.
[INDIRECT_PROMPT_INJECTION]: The skill processes user-provided technical specifications (e.g., application stack, traffic estimates) to generate deployment blueprints. While this creates a surface for indirect prompt injection, the severity is low as the tool is designed to produce structured code and configuration files rather than executing instructions within the agent's own context.

devops-helper