The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install official command-line tools from trusted vendors. This includes fetching the AWS CLI installer from awscli.amazonaws.com (Amazon/AWS), the Azure CLI installation script from aka.ms (Microsoft), and the Helm installation script from raw.githubusercontent.com/helm/helm (Cloud Native Computing Foundation). These downloads are standard procedures for setting up the required environment and target established, trusted infrastructure.
[COMMAND_EXECUTION]: The skill includes scripts that execute shell commands using the subprocess module. For example, scripts/cloudflare_deploy.py wraps the wrangler CLI to automate Worker deployments. It uses list-based command construction for subprocess.run, which is a secure practice to prevent shell injection. The commands executed are focused on standard infrastructure management tasks.
[DYNAMIC_EXECUTION]: The utility script scripts/docker_optimize.py performs static analysis of local Dockerfiles. It reads file content and applies regular expressions to identify potential optimization and security improvements, such as checking for root users or missing multi-stage builds. It does not execute the content of the files it analyzes.
[CREDENTIALS_SAFE]: The skill follows security best practices for secret management. The dot_env.example file uses descriptive placeholders for environment variables, and the reference documentation explicitly advises using secrets management solutions like HashiCorp Vault, AWS Secrets Manager, and Kubernetes Sealed Secrets rather than hardcoding credentials.

infra-engineer