The Agent Skills Directory

[SAFE]: The skill provides standard GitLab CI/CD configuration templates and best practices, focusing on merge request pipelines, rules, and DAGs.
[SAFE]: Remote resources, such as Docker images for Python, Kaniko, and GitLab Runner, are referenced from well-known and trusted registries (Google Container Registry and Docker Hub).
[SAFE]: The instructions explicitly warn against insecure practices, such as hardcoding authentication tokens in config.toml, and accurately highlight the security implications of using privileged mode or docker.sock mounts in runners.
[SAFE]: Secret handling recommendations follow standard security protocols for CI/CD environments, encouraging the use of masked and protected variables for sensitive credentials like CI_JOB_TOKEN and registry passwords.
[SAFE]: The provided scripts for Docker-in-Docker (dind) and Kaniko follow official documentation and industry standards for secure image building within CI environments.

gitlab-ci