The Agent Skills Directory

[SAFE]: The skill provides operational instructions for the Nika workflow engine, focusing on hardening workflows for production use.
[SAFE]: Security best practices are central to the instructions, including secret management via masked environment variables (secrets.X) and explicit egress sink declarations to prevent unauthorized data exposure.
[SAFE]: The skill promotes a 'default-deny' security posture through mandatory permits: blocks, which scope access to specific network hosts, file paths, and tools.
[SAFE]: The skill includes integrity verification mechanisms, such as TOFU (Trust On First Use) for MCP servers to prevent definition drift and cryptographic signatures (nika sign) for workflow and trace verification.
[SAFE]: Cost management features like nika check for estimation and --max-cost-usd for runtime caps are encouraged to prevent resource exhaustion.

nika-operating