The Agent Skills Directory

[SAFE]: The skill provides structured documentation and templates for Infrastructure as Code (IaC) and container orchestration. It promotes security best practices throughout, such as using non-root users, restricted pod security profiles, and external secret management.
[COMMAND_EXECUTION]: The scripts/devops_utils.py script executes the terraform command using subprocess.run(). The implementation uses a list of arguments and avoids invoking a shell, which mitigates command injection risks.
[EXTERNAL_DOWNLOADS]: The skill references official installation manifests and tools for ArgoCD and Flux. These downloads originate from well-known open-source project repositories (e.g., github.com/argoproj, github.com/fluxcd) and are documented neutrally as part of standard setup procedures.
[SAFE]: The utility script scripts/devops_utils.py uses yaml.safe_load_all() for manifest validation, preventing unsafe deserialization attacks. Example configuration files use clear placeholders for sensitive information and instruct users to utilize secure secret providers.

devops-iac-engineer