The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill provides instructions and examples for using Alpine-based init containers to download configuration tools and binaries from GitHub repositories during the container startup process.
Evidence: Examples in references/init-container-patterns.md and references/signoz-example.md demonstrate using wget to fetch releases from github.com/SigNoz/signoz and other user-specified repositories.
Context: The skill includes a dedicated 'Supply-chain security note' advising users to pin versions and verify SHA256 checksums for these downloads.
[COMMAND_EXECUTION]: The skill guides the agent and user in executing various shell commands for VPS management, secret generation, and Docker troubleshooting.
Evidence: Instructions for generating secrets using openssl rand -hex, inspecting containers with docker inspect, and managing files via SSH.
[DYNAMIC_EXECUTION]: The documentation describes patterns where shell scripts are dynamically generated inside init containers to write configuration files and set execution permissions on downloaded binaries.
Evidence: Use of heredocs (cat > /config/app.yaml <<'YAML') and chmod +x inside the command block of Docker Compose services.
[INDIRECT_PROMPT_INJECTION]: The skill functions by ingesting and transforming docker-compose.yml files and environment variables, which represents a potential ingestion surface for untrusted data.
Ingestion points: SKILL.md and various SOP files describe processing user-supplied YAML and configuration strings.
Boundary markers: The skill provides clear structural guidelines (checklists and SOPs) to ensure configurations are adapted correctly for the target platform.
Capability inventory: The skill enables writing to the filesystem via Docker volumes and executing commands via Docker containers, which are the primary intended functions of a deployment agent.
Sanitization: The documentation emphasizes explicit environment variable mapping (`env_file:
.env) and the removal of dangerous directives like container_name` to maintain isolation.

dokploy-docker-compose