The Agent Skills Directory

[SAFE]: The skill consists entirely of Markdown reference documents and YAML configuration files. No executable code (Python scripts, shell scripts, or binaries) is included in the package, eliminating the risk of direct malicious execution.
[SAFE]: All external resource references, such as documentation links and software packages, target well-known and trusted platforms including GitHub, GitLab, Atlassian, and the official Git project. This aligns with standard development practices for CI/CD configuration.
[SAFE]: The skill proactively addresses security concerns by providing comparison examples between secure and insecure patterns. It specifically warns against dangerous practices like using pull_request_target with secrets or vulnerable shell command interpolation in workflows.
[SAFE]: Any credentials present in configuration examples (such as in the Bitbucket Postgres service example) are clearly identifiable as non-sensitive placeholders like 'test' or 'YOUR_API_KEY_HERE', which are standard for educational documentation and do not constitute a credential leak.

git-ci-cd