The Agent Skills Directory

[SAFE]: The skill uses pinned GitHub Action SHAs (e.g., actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5) instead of mutable tags, which is a recommended security practice to prevent supply chain attacks through action updates.
[SAFE]: It implements a System Modification Approval Gate that requires the agent to explain the necessity of system-level changes and obtain explicit user confirmation before proceeding.
[SAFE]: All identified shell commands and Elixir mix tasks (e.g., mix deps.get, mix ecto.migrate, mix test) are standard, non-malicious operations within the Elixir and Phoenix development ecosystem.
[SAFE]: The skill encourages secure secret management by utilizing environment variables and GitHub Secrets rather than hardcoding credentials in the configuration files.

setup