The Agent Skills Directory

[Official Tool Installation]: The skill provides GitHub Actions templates that install the Aspire CLI using a remote script (curl -sSL https://aspire.dev/install.sh | bash). This targets the official domain for the .NET Aspire project and is a standard installation method for the ecosystem.
[Credential and Secret Management]: The instructions consistently emphasize security hygiene, specifically directing the agent to redact secret values in summaries and use secure provider-backed mechanisms (like GitHub Secrets or environment variables) instead of printing or hardcoding sensitive data.
[Workspace Data Ingestion]: The skill operates by analyzing project files (C#, TypeScript, and YAML) to orient itself. While this represents a surface for indirect prompt injection where malicious code in a repository could attempt to influence the agent, the skill includes explicit 'preflight' and 'validation' steps to ensure user intent is verified before performing billable or destructive operations.
[Technical Interaction Guidance]: A static analysis flag regarding concealment was identified in the instructions to avoid piping output through filters like tee or tail. This is confirmed as benign technical advice intended to preserve terminal interactivity for CLI prompts, ensuring the user can see and respond to deployment choices.

aspire-deployment