chef-custom-resources

Pass

Audited by Gen Agent Trust Hub on Aug 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes and executes local shell scripts (bin/cookbook-helpers, bin/gh-ci-job-logs) to automate cookbook maintenance tasks. These scripts rely on standard development tools such as git, gh, jq, yq, and curl.- [EXTERNAL_DOWNLOADS]: The bin/cookbook-helpers script fetches software lifecycle metadata from the endoflife.date API. This is a well-known service used to identify EOL platforms in metadata.rb as part of the Phase 2b: Platform Modernization workflow.- [DATA_EXPOSURE]: The skill uses the GitHub CLI (gh api) to retrieve raw job logs from GitHub Actions. This functionality is intended for debugging CI failures and operates within the context of the user's authenticated repository.- [SAFE]: The skill implements strong behavioral guardrails, requiring explicit user confirmation of scope (Phase 0) and mandatory verification gates (Phase 4b, 5b) before proposing any changes or opening pull requests.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 20, 2026, 09:11 AM
Security Audit — agent-trust-hub — chef-custom-resources