The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill references multiple GitHub Actions from official and well-known service providers to build CI/CD pipelines.
Uses actions from the actions organization for environment setup (Node.js, Python, Checkout).
Utilizes official tools from aws-actions and docker for deployment and container management.
Incorporates security scanners from aquasecurity and snyk to promote secure development practices.
[INDIRECT_PROMPT_INJECTION]: The skill provides templates that define an attack surface for indirect prompt injection by ingesting untrusted code from repository checkouts.
Ingestion points: actions/checkout@v4 in SKILL.md workflow snippets.
Boundary markers: Absent within the code snippets themselves; the skill relies on the user to implement secure code practices.
Capability inventory: Includes shell command execution (npm test, pytest), Kubernetes deployments (kubectl apply), and Docker registry operations.
Sanitization: The documentation explicitly teaches users to avoid hardcoding secrets and to use GitHub's secret management system to prevent data exposure.

github-actions-templates