The Agent Skills Directory

[SAFE]: The skill instructions guide the user through standard Kamal build workflows. It emphasizes using .kamal/secrets and Docker's secret mounting feature (--mount=type=secret) to handle sensitive data like GitHub tokens, which prevents them from being exposed in the image layers.
[COMMAND_EXECUTION]: The skill uses standard kamal CLI commands (kamal build push, kamal build details, etc.). These are the intended tools for the skill's purpose and are executed in a transparent manner.
[EXTERNAL_DOWNLOADS]: Mentions of external tools and services, such as the gh CLI and the kamal-deploy.org documentation, are appropriate for a developer tool and point to well-known, trusted resources.
[SAFE]: Heuristic detections of destructive commands were evaluated and determined to be false positives. The usage of rm -rf is strictly limited to cleaning up build caches within a Dockerfile environment (rm -rf /usr/local/bundle/cache), which is a standard practice for optimizing container images.

build