The Agent Skills Directory

[SAFE]: The skill provides industry-standard configuration templates for Kubernetes, Docker, and Terraform that incorporate essential security features like resource limits and health checks.
Evidence: Resource definitions in references/kubernetes.md and multi-stage builds in references/docker-patterns.md follow modern security guidelines.
[SAFE]: Explicit constraints and guidelines are provided to prevent the exposure of sensitive data, mandating the use of secret managers over hardcoded credentials or environment variables.
Evidence: SKILL.md contains specific MUST NOT constraints against storing secrets in code or variables, and examples use dummy placeholders.
[SAFE]: Containerization patterns enforce the principle of least privilege by defining non-root users and utilizing minimal base images.
Evidence: Dockerfile examples in references/docker-patterns.md and SKILL.md use USER nonroot or dedicated application users to mitigate potential container escape risks.
[SAFE]: The skill integrates security scanning and artifact signing tools into its CI/CD workflows, facilitating secure supply chain management.
Evidence: CI/CD examples in references/release-automation.md and SKILL.md include steps for trivy scanning and cosign signing.

devops-engineer