Lee Fowler
4451ceca54
* docs: improve token-efficient terraform state access * feat: add provider configuration skill * refactor: align provider resources with plugin framework * refactor: generalize provider actions guidance * feat: add provider scaffold and authentication guidance * docs: add acceptance test environment guidance * docs: register provider documentation and test skills * docs: expand provider documentation guidance * feat: add provider framework migration skill * feat: add provider ephemeral resources skill * feat: consolidate product plugins and apply governance * fix: correct imported skill metadata and references * docs: update supported gpt model baselines * fix: preserve unreleased changelog entries * ci: remove tessl skill evaluations * ci: streamline repository validation * docs: streamline contribution guidance * docs: remove migration prose from changelog * docs: refine issue intake and security guidance * docs: refine public repository guidance * docs: add readme navigation and recent updates * docs: update wording in skill catolog file --------- Co-authored-by: Andy Baran <andy.baran@hashicorp.com> Co-authored-by: Tyler Lynch <tyler.lynch@hashicorp.com>
802 B
Security
Do not report security-sensitive information in a public GitHub issue.
Security-sensitive Agent Skill issues include unsafe infrastructure guidance, credential mishandling, weakened access controls, sensitive configuration exposure, unsafe MCP server behavior, or dangerous product usage patterns. HashiCorp employees should use the established internal security reporting process and privately notify the owning maintainers. If no approved private reporting route is available, ask a known maintainer for the current route without disclosing sensitive details publicly.
For non-sensitive correctness issues, use the Skill bug template. Remove all credentials, account identifiers, infrastructure addresses, logs containing secrets, and private configuration before sharing a reproducer.