The Agent Skills Directory

[SAFE]: The skill provides documentation and standardized configuration templates for CI/CD pipelines. All external tools mentioned (Actions like actions/checkout, actions/setup-node, codecov/codecov-action) and security scanners (snyk, semgrep) are well-known, trusted services.
[COMMAND_EXECUTION]: Scripts in references/test-selection-strategy.md and references/flaky-test-detection.md use local CLI tools like git and grep to identify affected files and detect flaky tests. These operations are local and perform non-destructive read operations within a standard development environment.
[CREDENTIALS_UNSAFE]: The YAML and Groovy examples consistently use secure secret management practices, such as ${{ secrets.GITHUB_TOKEN }}, ${{ secrets.SNYK_TOKEN }}, and credentials('test-database-url'). Hardcoded database passwords in references/github-actions-pipeline.md (POSTGRES_PASSWORD: postgres) are standard practice for ephemeral test services running inside a containerized CI environment and do not represent a production credential exposure.

continuous-testing