The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill generates CI pipeline configurations that download the gitleaks binary from its official GitHub releases. The download is pinned to a specific version at generation time and is followed by a mandatory SHA-256 checksum verification to ensure binary integrity.\n- [REMOTE_CODE_EXECUTION]: The CI templates (GitHub Actions and Azure DevOps) execute the gitleaks binary to perform security audits. This execution is performed in a controlled environment with specific parameters aimed at preventing credential leaks.\n- [COMMAND_EXECUTION]: The skill requires the agent to run various shell commands for project discovery and verification, including dotnet, git, make, and gh. These are standard tools used for the skill's primary purpose of repo instrumentation.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local repository files (like AGENTS.md and docs/) to derive architecture rules. While this presents an ingestion surface, the risk is mitigated by a mandatory human-in-the-loop step in Phase 3 where the agent must get user agreement on all proposed changes and rules before they are applied.

instrument-project-dotnet