devops-engineer

Pass

Audited by Gen Agent Trust Hub on Mar 27, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides templates and guidance for DevOps tasks including CI/CD, containerization, and infrastructure management. It explicitly enforces security best practices such as avoiding secrets in code and using non-root users in containers.\n- [COMMAND_EXECUTION]: The skill contains various shell scripts and CLI commands (kubectl, terraform, docker) used for legitimate operational tasks. For example, 'references/incident-response.md' includes an evidence collection script that uses 'tcpdump' and 'kubectl logs', which is standard procedure for production troubleshooting.\n- [CREDENTIALS_UNSAFE]: While some templates include placeholder credentials (e.g., in 'references/kubernetes.md'), the skill's primary instructions in 'SKILL.md' strictly prohibit storing real secrets in code or environment files, mandating the use of secret managers instead.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 27, 2026, 07:23 AM