chef-custom-resources
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill includes and executes local shell scripts (
bin/cookbook-helpers,bin/gh-ci-job-logs) to automate cookbook maintenance tasks. These scripts rely on standard development tools such asgit,gh,jq,yq, andcurl.- [EXTERNAL_DOWNLOADS]: Thebin/cookbook-helpersscript fetches software lifecycle metadata from theendoflife.dateAPI. This is a well-known service used to identify EOL platforms inmetadata.rbas part of the Phase 2b: Platform Modernization workflow.- [DATA_EXPOSURE]: The skill uses the GitHub CLI (gh api) to retrieve raw job logs from GitHub Actions. This functionality is intended for debugging CI failures and operates within the context of the user's authenticated repository.- [SAFE]: The skill implements strong behavioral guardrails, requiring explicit user confirmation of scope (Phase 0) and mandatory verification gates (Phase 4b, 5b) before proposing any changes or opening pull requests.
Audit Metadata