The Agent Skills Directory

[COMMAND_EXECUTION]: The skill includes instructions and templates that utilize standard development tools such as xcodebuild, fastlane, and agvtool. These commands are used as intended for building, testing, and versioning Apple platform applications within a continuous integration environment.
[EXTERNAL_DOWNLOADS]: The templates reference official GitHub Actions (e.g., actions/checkout, actions/cache, actions/upload-artifact) and community-standard actions (softprops/action-gh-release). It also provides instructions for installing dependencies via Homebrew and RubyGems, which are well-known and trusted services for developer tooling.
[CREDENTIALS_SAFE]: The skill correctly identifies the need for secure handling of sensitive assets like App Store Connect API keys, distribution certificates, and provisioning profiles. It provides clear instructions for using GitHub Repository Secrets and environment variables instead of hardcoding credentials in the configuration files.
[INDIRECT_PROMPT_INJECTION]: The skill performs reconnaissance on the local filesystem to identify the project structure, Xcode schemes, and package managers to customize the generated templates.
Ingestion points: Project file names and directory structures identified through ls and find commands in the SKILL.md pre-generation checks.
Boundary markers: The generated templates use standard placeholders and environment variable interpolation; they do not include specific delimiters to protect against maliciously named files or project metadata.
Capability inventory: The agent uses the Bash, Write, and Edit tools to discover project information and generate the final configuration files.
Sanitization: The skill relies on the agent's logic to correctly identify project components, with no explicit sanitization of project names before they are written into the workflow YAML or fastlane files.

ci-cd-setup