opentofu-migration
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the official OpenTofu installation script from
get.opentofu.organd utilizes official Docker images from theopentofuorganization on GitHub Container Registry. - [COMMAND_EXECUTION]: Uses standard OpenTofu CLI commands (
tofu init,tofu plan,tofu apply) to manage infrastructure lifecycle, which is consistent with the skill's primary purpose. - [EXTERNAL_DOWNLOADS]: References official GitHub Actions from trusted organizations including
opentofu,aws-actions, and the primary GitHubactionsorganization for CI/CD pipeline configuration.
Audit Metadata