The Agent Skills Directory

[COMMAND_EXECUTION]: The skill contains standard shell commands within Dockerfiles and CI/CD pipelines (e.g., npm ci, go build, pip install, kubectl rollout). These are common deployment operations and do not represent a security risk within this context.
[EXTERNAL_DOWNLOADS]: The skill references official Docker images (Node.js, Go, Python, Alpine) and standard GitHub Actions. These originate from well-known services and are used for their intended purpose in building and deploying software.
[CREDENTIALS_SAFE]: The skill correctly demonstrates best practices for secret management by using placeholders like ${API_KEY} and referencing external secret managers instead of hardcoding sensitive data. It explicitly includes a production readiness check to ensure no hardcoded secrets exist in the code.
[PRIVILEGE_ESCALATION_NONE]: Dockerfile examples explicitly define and switch to a non-root user (appuser) before execution, adhering to the principle of least privilege.

deployment-patterns