The Agent Skills Directory

[SAFE]: The primary skill documentation and reference files adhere to security best practices for CI/CD, such as leveraging the GitHub Actions secrets context and avoiding hardcoded credentials.
[EXTERNAL_DOWNLOADS]: The skill utilizes several standard GitHub Actions, including actions/checkout, actions/setup-node, actions/upload-artifact, and dorny/test-reporter. These are official or widely-trusted community tools for repository management, runtime setup, and reporting.
[COMMAND_EXECUTION]: The skill templates and examples involve the execution of standard build and test commands (npm ci, npm test, npx jest) and platform-specific package managers (apt-get, brew, choco). These are necessary and expected for a skill focused on CI workflow configuration.
[INDIRECT_PROMPT_INJECTION]: The skill illustrates the use of workflow_dispatch inputs. While this represents a data ingestion point, the provided examples use safe patterns. The package also includes evaluation files that contain examples of insecure shell expansion in GitHub Actions for the purpose of testing security remediation capabilities; these are data fixtures rather than operational skill instructions.

github-actions-test-jobs