The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides Bash scripts and CI/CD templates that execute shell commands to manage deployments. These scripts utilize the tfy CLI and a custom authenticated curl wrapper (tfy-api.sh) to interact with the TrueFoundry API.
Evidence: Shell loops in SKILL.md and CI templates in references/ for iterating over changed files and invoking tfy apply.
[EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the official truefoundry Python package to provide the necessary CLI tools. It correctly recommends pinning versions (e.g., 0.5.0 or 0.5.3) to prevent supply chain risks from unpinned dependencies.
Evidence: pip install 'truefoundry==0.5.3' in GitHub Actions, GitLab CI, and Bitbucket pipeline templates.
[INDIRECT_PROMPT_INJECTION]: As a GitOps tool, the skill is designed to process external YAML configuration files from Git repositories, which introduces a potential surface for indirect injection if repository access is compromised.
Ingestion points: YAML resource specifications stored in Git repositories (SKILL.md, references/gitops-github-actions.md).
Boundary markers: The instructions explicitly require a tfy apply --dry-run validation step on Pull Requests to allow for manual review before any changes are applied to the environment.
Capability inventory: The skill has the capability to create, update, and manage cloud workloads, including services, jobs, and model deployments via the TrueFoundry platform.
Sanitization: The tfy CLI performs schema validation on all manifests, and the tfy-api.sh script includes basic logic to prevent path traversal attacks in API paths.

truefoundry-gitops