The Agent Skills Directory

[SAFE]: The skill provides legitimate administrative instructions for configuring identity management in CockroachDB.
[DATA_EXPOSURE_AND_EXFILTRATION]: All sensitive parameters, such as client secrets and LDAP bind passwords, use placeholders (e.g., <client-secret>, <bind-password>) rather than hardcoded credentials. It also includes guidance on using secure vaults for break-glass accounts.
[EXTERNAL_DOWNLOADS]: References and discovery URLs point to well-known and trusted services including Google, Microsoft Azure, and Okta, as well as the official Cockroach Labs documentation.
[COMMAND_EXECUTION]: Shell commands provided (e.g., cockroach sql, curl, ldapsearch) are standard tools used for authentication testing and database management within the intended administrative scope.
[INDIRECT_PROMPT_INJECTION]: While the skill involves processing configuration data to generate SQL statements, it serves as a configuration guide for administrators and includes explicit warnings about security considerations, such as HBA rule precedence and lockout risks.

configuring-sso-and-scim