ansible-idempotency
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation on Ansible idempotency patterns and includes a Python script for linting playbooks.
- [DYNAMIC_EXECUTION]: The
check_idempotency.pyscript usesyaml.safe_load()to process user-provided playbook files, which is the recommended secure practice to prevent arbitrary code execution during parsing. - [INDIRECT_PROMPT_INJECTION]: While the script ingests external YAML data, it performs static analysis only and does not execute the instructions contained within the playbooks, effectively mitigating injection risks.
- [CREDENTIALS_UNSAFE]: The skill proactively recommends the use of
no_log: truein Ansible tasks that handle sensitive data like tokens or passwords to prevent credential exposure in logs.
Audit Metadata