ansible-idempotency

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation on Ansible idempotency patterns and includes a Python script for linting playbooks.
  • [DYNAMIC_EXECUTION]: The check_idempotency.py script uses yaml.safe_load() to process user-provided playbook files, which is the recommended secure practice to prevent arbitrary code execution during parsing.
  • [INDIRECT_PROMPT_INJECTION]: While the script ingests external YAML data, it performs static analysis only and does not execute the instructions contained within the playbooks, effectively mitigating injection risks.
  • [CREDENTIALS_UNSAFE]: The skill proactively recommends the use of no_log: true in Ansible tasks that handle sensitive data like tokens or passwords to prevent credential exposure in logs.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 12:53 AM