The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill provides workflow templates that reference official GitHub Actions from trusted organizations like Microsoft, Docker, and GitHub. It also recommends well-known tools and extensions, such as Codecov for coverage reporting and the gh-workflow-validator extension for local verification.
[COMMAND_EXECUTION]: Instructions include shell, PowerShell, and CLI commands (e.g., dotnet, gh, cargo) designed for local development verification and automated CI/CD environments. These commands are standard for DevOps tasks such as building, signing, and deploying .NET applications.
[INDIRECT_PROMPT_INJECTION]: As the skill generates CI/CD pipeline templates, there is an inherent attack surface where these pipelines ingest external metadata (e.g., Pull Request descriptions or Git tags) which could potentially be manipulated. The templates follow best practices for sanitization and metadata extraction to mitigate these risks.
[DYNAMIC_EXECUTION]: Provides reusable code snippets in Python and PowerShell to be embedded within Azure DevOps and GitHub Actions pipelines. These snippets perform logic such as enforcing code coverage thresholds and managing MSIX certificates, which are consistent with the skill's technical purpose.

dotnet-devops