opentofu-migration

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the official OpenTofu installation script from get.opentofu.org and utilizes official Docker images from the opentofu organization on GitHub Container Registry.
  • [COMMAND_EXECUTION]: Uses standard OpenTofu CLI commands (tofu init, tofu plan, tofu apply) to manage infrastructure lifecycle, which is consistent with the skill's primary purpose.
  • [EXTERNAL_DOWNLOADS]: References official GitHub Actions from trusted organizations including opentofu, aws-actions, and the primary GitHub actions organization for CI/CD pipeline configuration.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 07:05 AM