packer
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATION
Full Analysis
- [SAFE]: The skill instructions emphasize security best practices, such as never baking long-lived credentials into machine images and using ephemeral CI credentials (OIDC) or instance roles instead.
- [COMMAND_EXECUTION]: The skill describes a standard workflow using the
packerCLI (packer init,validate,build). These operations are consistent with the skill's stated purpose of automating machine image builds. - [EXTERNAL_DOWNLOADS]: HCL templates provided in the skill reference plugins from official HashiCorp repositories via GitHub. These are downloads from well-known services and are necessary for the tool's operation.
- [PRIVILEGE_ESCALATION]: Provisioning scripts in the examples use
sudoto install packages (e.g.,apt-get install nginx) on the target machine image. This is standard practice for image creation and does not represent an escalation of the agent's own local privileges.
Audit Metadata