The Agent Skills Directory

Remote Script Installation: The skill's CI/CD references include instructions to download and execute an installer from https://aspire.dev/install.sh. This is a vendor-provided installation method for the Aspire CLI and is considered a standard deployment practice within this context.
Secret Redaction and Management: Instructions within the skill explicitly advise against printing or logging secret values such as API keys or connection strings. This is a defensive measure to prevent accidental exposure of sensitive credentials and corresponds to the static detection hit for concealment.
Deployment Capability Surface: The skill has broad capabilities to execute system commands and cloud management tools (e.g., az, kubectl, aws). This is necessary for its role in infrastructure deployment but requires the agent to handle workspace data with care to avoid unintended actions.
Indirect Prompt Injection Consideration: The skill processes local project files and configuration (AppHost models) to derive deployment plans. This creates an attack surface where untrusted data from a processed repository could potentially influence agent behavior, though the risk is mitigated by the skill's instruction to verify plans via the CLI before execution.

aspire-deployment