writing-infrastructure-code
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides legitimate templates and documentation for infrastructure-as-code (IaC) workflows. It includes standard validation and drift detection scripts that utilize official industry tools.\n- [COMMAND_EXECUTION]: The skill includes shell scripts (scripts/drift-check.sh, scripts/validate-terraform.sh) that invoke terraform and pulumi commands. These are expected behaviors for an infrastructure management skill.\n- [INDIRECT_PROMPT_INJECTION]: The drift-check.sh utility captures and displays output from external cloud providers via IaC tools. While this data is unvetted, the risk is inherent to infrastructure management and the skill itself does not process this data in a privileged or unsafe manner.
Audit Metadata