The Agent Skills Directory

[SAFE]: The skill functions as a legitimate technical reference for Craft Cloud, Pixel & Tonic's serverless hosting platform. It provides documentation on configuration, deployment pipelines, and environment management based on official sources.
[SAFE]: Documentation and source code references point exclusively to the official craftcms.com domain and the github.com/craftcms organization, which are trusted and well-known entities.
[SAFE]: The skill includes proactive security guidance, such as warning against manual CSRF token output—which could leak tokens when using edge static caching—and recommending the safe csrfInput() Twig function.
[SAFE]: Command-line examples for database restoration and asset migration (aws s3 sync, pg_restore) utilize appropriate placeholders for sensitive credentials and represent standard platform operations.
[SAFE]: Guidance regarding environment variables distinguishes between build-time and runtime contexts and identifies reserved variables (like CRAFT_SECURITY_KEY and CRAFT_DB_*) to prevent misconfiguration or accidental exposure.
[SAFE]: No malicious patterns, obfuscation, prompt injection, or unauthorized data access attempts were found in the provided files.

craft-cloud