The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install the Cosign binary from the official Sigstore GitHub releases and via standard package managers like Homebrew and Go. These sources are recognized as well-known technology providers.
[EXTERNAL_DOWNLOADS]: The CI/CD examples reference the official sigstore/cosign-installer GitHub Action, which is the standard method for integrating this tool into automated workflows.
[COMMAND_EXECUTION]: The skill includes shell commands for signing, verifying, and generating attestations for container images. These operations are essential to the primary purpose of the tool and do not involve unauthorized access or data exfiltration.

cosign