The Agent Skills Directory

[SAFE]: The skill serves as a legitimate resource for security engineering, providing patterns for encryption, identity management, and audit logging across major cloud providers (AWS, Azure, GCP).
[EXTERNAL_DOWNLOADS]: The documentation and example scripts reference industry-standard tools and libraries including checkov, tfsec, trivy, opa, boto3, pyotp, and qrcode. These are standard dependencies for security automation and compliance as code.
[DATA_EXFILTRATION]: The provided EvidenceCollector script interacts with AWS services using the official SDK (boto3) to gather resource metadata. It demonstrates storing this data in an S3 bucket for audit evidence, which is the intended functional purpose of the skill and does not involve unauthorized data transfer.
[COMMAND_EXECUTION]: The skill provides patterns for executing local security scanning and policy evaluation tools within CI/CD pipelines. These commands are transparently documented and use hardcoded argument lists, following safe implementation practices.

implementing-compliance