The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill sets up CI/CD workflows that download dependencies from standard registries via npm ci and use official GitHub Actions such as actions/checkout and actions/setup-node.
[INDIRECT_PROMPT_INJECTION]: The skill involves processing external data from the Apollo API during health checks and integration tests.
Ingestion points: API responses captured by curl and test runner outputs in SKILL.md and references/implementation-guide.md.
Boundary markers: None specified in the workflow templates or instructions.
Capability inventory: The skill utilizes Read, Write, Edit, and Bash tools for file and secret management.
Sanitization: No explicit sanitization of the API response body is performed before outputting status messages.
[DYNAMIC_EXECUTION]: Includes the creation and execution of validation scripts like scripts/validate-apollo-config.ts used to check environment configuration and API health during the build process. These are standard development tasks.
[DATA_EXPOSURE]: Correctly recommends using gh secret set for managing sensitive API keys, which follows security best practices. A minor observation: one example in the implementation guide passes an API key as a URL query parameter, which is a potential log exposure risk but is contextually tied to legacy API health check patterns.

apollo-ci-integration