vagrant
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download GPG keys and software repositories from HashiCorp's official releases domain (
apt.releases.hashicorp.com). - [COMMAND_EXECUTION]: The documentation includes various shell commands for installing software via system package managers (
apt,brew,choco), managing Vagrant plugins, and executing virtual machine lifecycle commands such asvagrant up,vagrant ssh, andvagrant halt. - [PRIVILEGE_ESCALATION]: Installation procedures for Linux environments utilize
sudofor administrative tasks, including adding repository keys and installing system-level packages. - [CREDENTIALS_UNSAFE]: Configuration examples for cloud providers and provisioners reference local paths to sensitive files, such as SSH private keys (
~/.ssh/my-key.pem) and Ansible vault password files (~/.vault_pass), which are standard placeholders for infrastructure-as-code configuration.
Audit Metadata