ansible-generator
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a testing fixture at
test/test_fixture_regressions.pythat utilizessubprocess.runto call theansible-playbookcommand. This is a standard implementation for regression testing generated Ansible roles and is not triggered during regular skill operation. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided natural language to generate infrastructure code. It mitigates injection risks by following a deterministic workflow, referencing pre-defined security standards, and instructing the agent to mask sensitive information using the
no_logattribute. - [SAFE]: The skill acts as a development aid, providing industry-standard templates for Ansible projects. While some templates include configurations such as
host_key_checking = Falseinansible.cfg, these are common defaults in development scaffolding and do not constitute malicious behavior.
Audit Metadata