The Agent Skills Directory

[COMMAND_EXECUTION]: The skill's primary function is managing remote servers via SSH and sudo. It implements extensive safety protocols including mandatory unified diffs shown for user approval, atomic backups stored in /var/backups/devops/, and automated validation (e.g., nginx -t) with immediate rollback if errors are detected.
[PROMPT_INJECTION]: To prevent unauthorized or accidental modifications, the skill uses a production-safety gate. Critical services and containers can be tagged as 'production' in the state file, requiring the user to provide an explicit yes, production confirmation before any changes are applied.
[EXTERNAL_DOWNLOADS]: The skill facilitates the installation of standard system tools such as ufw, fail2ban, and certbot from official Debian/Ubuntu repositories and the Snap Store. These are well-known, trusted services used for server hardening.
[DATA_EXFILTRATION]: While the skill accesses sensitive system configurations (e.g., SSH and Nginx configs) for auditing purposes, it does not transmit this data to external third-party domains. All audit logs and state information are maintained locally on the user's machine.
[CREDENTIALS_UNSAFE]: The skill correctly avoids hardcoding secrets and instead relies on standard SSH key-based authentication. It provides comprehensive documentation on setting up a dedicated, least-privileged service user (agentops) to maintain security boundaries and auditability.

devops