The Agent Skills Directory

[SAFE]: The skill provides automated auditing scripts (audit-dockerfile.sh, audit-workflow.sh) that perform local static analysis of project files. These scripts use standard tools like grep to identify security misconfigurations (e.g., containers running as root, secrets in environment variables).
[SAFE]: The maintenance script pin-actions-to-sha.sh assists in security hardening by resolving GitHub Action tags to commit SHAs. It interacts with the official GitHub API, a well-known and trusted service.
[SAFE]: All external references, such as the Depot CLI installation instructions (depot.dev), originate from well-known technology services and are directly related to the skill's stated purpose of pipeline acceleration.
[SAFE]: The skill does not contain any obfuscated code, data exfiltration patterns, or unauthorized persistence mechanisms. All logic is transparent and aligns with the role of a DevOps security auditor.

devops-weapon