The Agent Skills Directory

[SAFE]: The skill serves as an educational resource for DevOps and CI/CD, providing templates that follow security best practices such as non-root container users and robust secret management.
[EXTERNAL_DOWNLOADS]: The GitHub Actions examples reference external actions from trusted organizations and well-known services, including official GitHub actions, Snyk for vulnerability scanning, and TruffleHog for secret detection. These are standard, industry-accepted tools.
[COMMAND_EXECUTION]: Shell commands provided in the deployment and health check examples (e.g., SSH into servers, Docker image pulls, and Curl-based health checks) represent standard operational tasks for CI/CD pipelines and do not exhibit malicious intent.
[CREDENTIALS_UNSAFE]: The templates correctly demonstrate the use of GitHub Secrets and Terraform variables for managing sensitive data, adhering to the principle of not hardcoding credentials in configuration or code files.

devops-cicd