The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill downloads the official Docker installation script from https://get.docker.com. This is a well-known service provided by Docker, Inc. for automated installation and is considered a safe source.
[REMOTE_CODE_EXECUTION]: The script scripts/provision.sh and instructions in SKILL.md execute a remote script via curl -fsSL https://get.docker.com | sh. While piping remote content to a shell is generally high risk, it is the standard and documented method for installing Docker from its official source.
[COMMAND_EXECUTION]: The skill uses ssh to execute commands on a remote server specified by the user. These commands include package installation, service management (systemctl), and Docker container management (docker run, docker exec). The user maintains control over the target machine and provides the necessary credentials.
[CREDENTIALS_SAFE]: The skill manages SSH keys and configuration to enable passwordless login. It uses ssh-keygen to generate a new key if one does not exist and ssh-copy-id to push it to the server. Sensitive inputs like the GitLab registration token and the remote server password are provided by the user via interactive shell commands and are not hardcoded or saved in the skill's code.

gitlab-runner-provision