Secure and auditable skills

A good skill packages a procedure. A dangerous skill packages excessive permissions, opaque scripts, and network calls that nobody has read.

Create small, versionable skills that are easy to review.
Audit `SKILL.md`, auxiliary scripts, and permissions before installing.
Avoid skills that mix knowledge, execution, and secrets.

Terminal

---
name: deploy-preview
description: Crea un deploy preview y resume el resultado.
allowed-tools: Bash(npm run build), Bash(vercel deploy --yes), Bash(git status *)
disable-model-invocation: true
---
1. Comprueba estado de git.
2. Ejecuta build.
3. Crea deploy preview.
4. Devuelve URL, commit y errores si los hay.
5. No hagas deploy a produccion.

Audit checklist

Read the entire `SKILL.md`, not just the description.
Look for `curl`, `wget`, `nc`, `ssh`, `gh auth token`, `.env`, and external domains.
Review `allowed-tools`: avoid `Bash(*)` unless it is local and trusted.
Check scripts included in the skill folder.
Test first in a clean project, without real credentials.

Hooks: Deterministic Automation MCP without giving away your keys

Complete Aulafy mapSee how this lesson fits without leaving your path.

Complete Aulafy map

How all courses connect

This is not a checklist. Start with the foundation, choose an outcome, and go deeper only when your project needs more control.

1Understand
2Apply or build
3Operate with confidence

Choose an application

Turn the foundation into a visible outcome: a website, a business improvement, media, or an interactive experience.

AI for small businesses and freelancersUse AI where it improves real work.Beginner to intermediate · 20 lessonsView course Generative AI: image, voice and videoCreate production-ready media with AI pipelines.Beginner to intermediate · 7 lessonsView course Games, 3D and simulations with AIPrototype interactive worlds with AI-assisted tools.Beginner to intermediate · 6 lessonsView course

Continue into the technical branch when you need to maintain code, data, or infrastructure.

Build with code

Prepare your environment, work with coding agents, and run models while keeping control of your projects.

Aulafy foundationsPython, Git, terminal, and Docker for learning AI smoothly.Beginner · 6 lessonsView course Codex for programmersBuild, test, and ship changes with OpenAI Codex.Beginner to advanced · 10 lessonsView course Claude Code, from zero to proBuild real software by talking to AI in your terminal.Beginner to advanced · 24 lessonsView course Claude Code + Local AIPrivate AI tools that run on your machine.Intermediate · 34 lessonsView course

This branch prepares you to design and operate reliable AI systems.

Take systems to production

Combine retrieval, agents, evaluation, security, deployment, and model adaptation when the problem requires it.

Advanced and secure RAGBuild retrieval systems that answer better and leak less.Intermediate · 14 lessonsView course Agents and automationYou are hereDesign agents that can work, recover and stay under control.Intermediate to advanced · 20 lessonsView course Production agents with LangGraph and n8nTake agent prototypes into reliable operations.Intermediate to advanced · 9 lessonsView course Self-hosted AI automation for small businessesRun AI workflows on your own infrastructure.Intermediate · 10 lessonsView course AI Router and content systemRoute local and frontier models with quality, cost, and privacy controls.Intermediate to advanced · 6 lessonsView course AI security and evaluationMeasure, test and harden AI systems before trusting them.Intermediate · 7 lessonsView course Local MLOps and model deploymentServe, monitor and operate models from your own stack.Intermediate to advanced · 10 lessonsView course Fine-tuning and post-training for LLMsTrain useful adapters without losing control.Intermediate to advanced · 8 lessonsView course

You do not need every course: choose the component your system needs and return as it grows.

View full catalogue