The Agent Skills Directory

[SAFE]: The skill provides documentation and examples for security automation using well-known industry tools such as TruffleHog, Semgrep, Trivy, and Checkov from established providers.
[SAFE]: Includes explicit safety warnings regarding the use of external GitHub Actions, recommending the use of pinned commit SHAs and limited permissions (contents: read).
[SAFE]: The Python remediation example using boto3 is a standard, scoped operation for securing S3 buckets and requires pre-approved credentials.
[SAFE]: The skill emphasizes operational security best practices, requiring authorized scope, staging environment testing, and human review gates before taking automated remediation actions.

security-automation