The Agent Skills Directory

[SAFE]: The skill serves as a documentation resource for the Servd hosting platform and its associated Craft CMS plugin. It follows security best practices by recommending the use of environment variables for sensitive keys and secure SSH tunnels for database connections.\n- [EXTERNAL_DOWNLOADS]: The skill mentions the installation of the servd/craft-asset-storage plugin from the official vendor repository, which is standard procedure for using the platform.\n- [COMMAND_EXECUTION]: The skill describes various console commands (e.g., pull-database, push-assets) and build configuration (servd.yaml). These are documented as part of the platform's standard operational workflow and include appropriate warnings regarding their impact on live environments.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes project configuration files (servd.yaml) and suggests syncing external data, which constitutes a potential attack surface. Evidence: 1. Ingestion: servd.yaml (referenced in deploy-and-environments.md). 2. Boundary markers: None provided. 3. Capabilities: Includes filesystem writes and database synchronization via push-database and clone commands. 4. Sanitization: Not explicitly discussed. The risk is considered low given the intended use as a reference tool.

servd