The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill utilizes official and trusted GitHub Actions for environment setup, including asdf-vm/actions/setup, actions/checkout, oven-sh/setup-bun, and astral-sh/setup-uv. All downloads are from well-known technology organizations or established service providers.- [REMOTE_CODE_EXECUTION]: Provisioning is performed via trusted marketplace actions and standard package managers (bun, uv). The skill enforces the use of lockfile-frozen installations (e.g., --frozen-lockfile, --frozen) to ensure environment reproducibility and prevent supply chain attacks during the CI build process.- [DATA_EXFILTRATION]: The instructions and templates strictly advocate for a credential-free architecture for quality gates. It explicitly warns against using cloud secrets in linting or testing workflows that run on fork pull requests, mitigating the risk of secret leakage to unauthorized actors.- [COMMAND_EXECUTION]: The skill implements a standard script contract (lint, format:check, typecheck) to run linters and tests directly in the CI environment. This approach avoids the use of unverified wrapper frameworks or pre-commit hooks that can be bypassed or introduce unnecessary complexity.

ci-quality-gates