The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill specifies the use of official and well-known Docker images from trusted registries, such as the golang builder images and gcr.io/distroless runtime images. It also utilizes standard GitHub Actions for its CI/CD workflows from reputable vendors.
[CREDENTIALS_UNSAFE]: The skill implements the 12-factor app methodology by managing configuration through environment variables. It provides clear guidance on using Kubernetes Secrets and GitHub Actions Secrets for sensitive data like database connection strings and JWT secrets, and explicitly advises against committing sensitive .env files to version control.
[COMMAND_EXECUTION]: Includes standard instructional shell commands for Docker, Kubernetes (kubectl), and Helm which are necessary for the skill's purpose. These commands do not involve piping remote scripts into a shell or other risky execution patterns.
[SAFE]: The skill incorporates several high-standard security features, such as multi-stage builds to minimize image size and attack surface, the use of distroless images that lack a shell to prevent shell injection, and the configuration of non-root users (UID 65532) for container execution.

golang-gin-deploy