devops-engineer
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides templates and guidance for DevOps tasks including CI/CD, containerization, and infrastructure management. It explicitly enforces security best practices such as avoiding secrets in code and using non-root users in containers.\n- [COMMAND_EXECUTION]: The skill contains various shell scripts and CLI commands (kubectl, terraform, docker) used for legitimate operational tasks. For example, 'references/incident-response.md' includes an evidence collection script that uses 'tcpdump' and 'kubectl logs', which is standard procedure for production troubleshooting.\n- [CREDENTIALS_UNSAFE]: While some templates include placeholder credentials (e.g., in 'references/kubernetes.md'), the skill's primary instructions in 'SKILL.md' strictly prohibit storing real secrets in code or environment files, mandating the use of secret managers instead.
Audit Metadata