The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill fetches Kubernetes manifests and installation scripts from official project sources. Evidence: kubectl apply commands in SKILL.md and scripts/install-argocd.sh targeting the argoproj repository on GitHub; curl and wget commands in references/flux-patterns.md and scripts/install-flux.sh targeting fluxcd.io.
[REMOTE_CODE_EXECUTION]: The skill includes instructions to download and execute installation scripts for official tools. Evidence: Piping the Flux CD installation script from fluxcd.io directly into bash in scripts/install-flux.sh and references/flux-patterns.md.
[COMMAND_EXECUTION]: Automated scripts and documentation guide the user through executing standard CLI commands. Evidence: Extensive use of kubectl, flux, argocd, and kustomize CLI tools across documentation and automation scripts to manage cluster state.
[PRIVILEGE_ESCALATION]: Installation instructions for official CLI tools and plugins involve using privileged commands to configure the system. Evidence: Use of sudo to execute installation scripts and move binaries to system paths (/usr/local/bin/) in scripts/install-flux.sh and references/progressive-delivery.md.
[INDIRECT_PROMPT_INJECTION]: The skill processes declarative configuration from external sources, which is inherent to the GitOps model. Evidence: Ingestion points: External Git repositories defined as sources in examples/flux/gitrepository.yaml and cluster resources read via CLI tools. Capability inventory: Subprocess execution via kubectl apply and scripted environment promotions that update files using sed. Boundary markers: Absent in the provided templates. Sanitization: Standard for the referenced GitOps tools, but not explicitly implemented in the skill's utility scripts.

implementing-gitops