The Agent Skills Directory

[NO_CODE]: The skill is composed entirely of markdown documentation, templates, and evaluation data. It does not contain any executable scripts (such as .py, .js, or .sh files), which inherently eliminates risks associated with direct code execution by the skill itself.- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to analyze external data sources including community issue trackers, support tickets, and OpenAPI specifications. While this creates a surface for indirect prompt injection from malicious external content, the risk is inherent to the task of technical auditing. The skill mitigates this by providing structured 'Gate Matrix' and 'Audit' templates to standardize the analysis process.- [EXTERNAL_DOWNLOADS]: The skill provides instructions for using well-known and trusted tools within the DevOps ecosystem, such as GoReleaser, Syft, and HashiCorp's official scaffolding and documentation generators. References to external repositories and registries (Terraform Registry, OpenTofu Registry, and HashiCorp GitHub org) are used according to standard industry best practices and target established, reputable entities.

terraform-provider-offering