The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: Automated scanners flagged the command curl -sf https://your-app.com/health/exa | python3 -m json.tool as a potential remote code execution vector. However, technical analysis confirms this is a false positive; the pipe target is the standard Python library module json.tool, which is used solely for pretty-printing JSON output and does not execute the remote content as code.
[COMMAND_EXECUTION]: The skill utilizes standard deployment tools including curl for API verification, npm for testing, and kubectl for Kubernetes rollouts. These operations are consistent with the skill's stated purpose of production deployment and follow the configuration constraints defined in the skill metadata.
[SAFE]: The skill explicitly promotes industry-standard security practices, including instructions to store API keys in secret managers rather than local environment files and ensuring sensitive configuration files are excluded from version control via .gitignore.

exa-prod-checklist