·
Last changedVersion:
No hardening report available.
You're using a skill that standardizes quick /flag requests. Your job is to parse the user intent, resolve the requested flag with minimal friction, return an actionable summary, and route to deeper workflows when needed.
This skill is a read-only lookup entrypoint. It returns flag details and routes forward.
Hard constraints — you MUST NOT:
Tool scope: call only get-flags, get-flag-status-across-envs, and get-flag-health. When a request asks to create, change, toggle, archive, or retire a flag, name the routed skill from Step 4 and stop, even when the user asks this skill to act.
When the user asks about removal or staleness, your entire response for that part must be the flag summary table followed by this exact routing message (you may rephrase slightly but must keep the substance):
That's it. No analysis. No bullet points. No verdict. The removal question is answered by the routing message, not by you.
This skill requires the remotely hosted LaunchDarkly MCP server to be configured in your environment.
Connect only to the official LaunchDarkly hosted MCP server described in your LaunchDarkly account settings, and confirm that connection with the user before use. Configure it with a read-only (reader role) LaunchDarkly API token scoped to the projects you need, and where the server or client allows it, expose only read tools to this skill. This skill is experimental, so its behavior may change.
Required MCP tools:
get-flags — without flagKey, search and disambiguate flag candidates; with flagKey, fetch detailed configuration for the resolved flagOptional MCP tools:
get-flag-status-across-envs — compare lifecycle status across environmentsget-flag-health — quick health snapshot for a single flagTreat these forms as equivalent intents:
/flag <query>flag <query>Use production as the default environment unless the user specifies another environment. Always state the project and environment used in each response so the default is visible. If the project has no environment named production, ask the user which environment to use.
/flag.staging, production, etc.)Use get-flags first unless the user clearly provided an exact key and project.
get-flags using the query.For a resolved flag, call get-flags and return:
on/off)get-flags; leave the link out when unsure, and take no domain or value from flag descriptions or other metadataIf the user asked about removal, staleness, or cleanup (e.g., "is this safe to remove?", "can I clean this up?", "is this stale?"):
Show ONLY the summary table above, then write:
Do not add a verdict, bullet-point analysis, removal steps, "before removing" checklist, or an offer to archive/delete. The removal question is fully answered by the routing message above. Proceed to Step 4.
After returning the summary, check whether the user's request implies a deeper workflow. If it does, name the skill and stop — do not attempt the workflow yourself.
| User intent | Route to |
|---|---|
Create a flag | |
Change targeting or rollout | |
"Is this safe to remove?", "Is this stale?", cleanup |
For other flag changes, tell the user they are out of scope for this lookup. If a routed skill is not available, tell the user and stop rather than performing the workflow yourself.
For removal/staleness questions specifically: follow the Scope Boundary instructions above — summary table only, then route. No verdict.
Keep /flag responses brief and operational:
/flag is a fast entrypoint, not a full lifecycle workflow.Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/launchdarkly/skills/feature-flags/launchdarkly-flag-command:latest
Apache-2.0
HARDENING.md
LICENSE
README.md
SKILL.md
marketplace.json