The Agent Skills Directory

[SAFE]: The skill provides documentation for configuring GitHub Dependabot.
All code snippets are standard .github/dependabot.yml configuration examples for monitoring various package ecosystems (npm, pip, docker, etc.).
It assists agents in identifying repo structures and mapping directories for automated dependency management.
[EXTERNAL_DOWNLOADS]: The skill references external GitHub resources.
Points to the advanced-security plugin and official GitHub MCP toolsets.
References official product changelogs on the github.blog domain.
All resources originate from the official vendor ('github').
[DYNAMIC_EXECUTION]: The documentation includes reference to the insecure-external-code-execution setting.
This is a standard, documented configuration option for the Dependabot service that allows it to execute code within manifests during dependency resolution for specific ecosystems (e.g., Ruby Bundler or Python Pip).
[CREDENTIALS_UNSAFE]: The skill references secrets using standard GitHub platform syntax.
Examples include using placeholders like token: ${{secrets.NPM_TOKEN}} and password: ${{secrets.GHCR_TOKEN}}.
These are not hardcoded credentials but instructions on how to securely reference repository secrets.

dependabot