pulumi

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs users to download the Pulumi CLI and various provider SDKs (such as AWS, Azure, and GCP) from official sources and standard package registries like npm and PyPI.
  • [REMOTE_CODE_EXECUTION]: Both SKILL.md and references/00-overview.md contain the official installation command curl -fsSL https://get.pulumi.com | sh. This executes a remote setup script from Pulumi's verified domain.
  • [COMMAND_EXECUTION]: The skill includes a utility script, scripts/check-updates.py, which performs network requests to api.github.com and pulumi.com to check for the latest tool versions and verify documentation availability.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 10:30 AM
Security Audit — agent-trust-hub — pulumi