The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides a suite of Bash scripts to automate local security and quality audits, including scripts/check-tls-minimum.sh for verifying modern protocol enforcement and scripts/verify-spdx-headers.sh for ensuring license compliance across the codebase.
[EXTERNAL_DOWNLOADS]: The skill interacts with trusted, well-known services such as the GitHub API and the OpenSSF Best Practices platform (bestpractices.dev) to fetch project status, verify repository settings, and submit badge criteria data.
[DYNAMIC_EXECUTION]: Within the checkpoints.yaml file, the skill utilizes php -r to execute inline logic for parsing complex JSON5 configuration files (such as Infection mutation testing configs). This is used specifically to verify that security and quality thresholds are met during the assessment process.
[SAFE]: The skill promotes security best practices, such as providing detailed guidance on preventing script injection in GitHub Actions and demonstrating memory-safe handling of secrets using sodium_memzero(). A deterministic detector hit for destructive commands is a false positive; the identified rm -rf command is a documented optimization for GitHub Actions runners to reclaim disk space by removing unused SDKs.

enterprise-readiness