Skip to main content

Component Creator

Guides users in creating production-ready to-be-continuous components with best practices for architecture and CI/CD integration.

Install this skill

or
76/100

Security score

The Component Creator skill was audited on Feb 9, 2026 and we found 12 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 532

Template literal with variable interpolation in command context

SourceSKILL.md
532```bash
medium line 560

Template literal with variable interpolation in command context

SourceSKILL.md
560```yaml
medium line 576

Template literal with variable interpolation in command context

SourceSKILL.md
576```yaml
low line 161

Access to .env file

SourceSKILL.md
161dotenv: component.env
low line 569

Access to .env file

SourceSKILL.md
569} > component.env
low line 572

Access to .env file

SourceSKILL.md
572dotenv: component.env
low line 94

External URL reference

SourceSKILL.md
94# Documentation: https://to-be-continuous.gitlab.io/doc/ref/component-name
low line 318

External URL reference

SourceSKILL.md
318http_proxy: "http://proxy:8080"
low line 460

External URL reference

SourceSKILL.md
460REGISTRY_TOKEN: '@url@http://vault-secrets-provider/api/secrets/registry?field=token'
low line 528

External URL reference

SourceSKILL.md
528VAULT_SECRET: '@url@http://vault-secrets-provider/api/secrets/path?field=name'
low line 785

External URL reference

SourceSKILL.md
785Follow [Keep a Changelog](https://keepachangelog.com/):
low line 810

External URL reference

SourceSKILL.md
810Components MUST follow [SemVer](https://semver.org/):
Scanned on Feb 9, 2026
View Security Dashboard
Installation guide →