The Agent Skills Directory

[SAFE]: The skill provides legitimate documentation and automation templates for deploying and managing GitHub Pages sites.
[COMMAND_EXECUTION]: The provided utility scripts (check-site-status.sh, verify-dns.sh) use standard system tools like curl, dig, and the GitHub CLI (gh) to verify site availability and DNS configuration. These operations are limited to the skill's stated purpose of site management.
[EXTERNAL_DOWNLOADS]: The skill references official GitHub Actions (e.g., actions/checkout, actions/deploy-pages) and documentation from trusted sources like docs.github.com and jekyllrb.com.
[DATA_EXPOSURE]: The skill emphasizes security by providing guidance on preventing secret exposure, recommending the use of .gitignore for sensitive files, and suggesting manual checks for credentials before code is pushed.
[INDIRECT_PROMPT_INJECTION]: The skill ingests user input such as repository names and custom domains to populate workflow templates. While this creates a surface for indirect injection, the risk is minimal as the templates are intended for user review within a standard development environment.
Ingestion points: User-provided repository names and domain strings in SKILL.md workflows and scripts.
Boundary markers: None explicitly defined for user inputs within the markdown templates.
Capability inventory: The skill uses gh api for repository configuration and git for commit/push operations.
Sanitization: Standard shell script practices are used in the provided utility scripts.

github-pages