pulumi-go
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate guidance for infrastructure automation using Go and Pulumi, consistent with industry best practices for infrastructure-as-code (IaC).
- [SAFE]: Explicitly recommends secure authentication and secret management workflows, specifically leveraging OIDC and Pulumi ESC to reduce the risk of credential exposure.
- [COMMAND_EXECUTION]: Employs standard CLI operations for building and deploying infrastructure, such as
go build,pulumi up, andpulumi env run, which are standard for the stated development purpose. - [EXTERNAL_DOWNLOADS]: Documents the use of Pulumi's package management system (
pulumi package add) to integrate reusable components. The examples provided use generic placeholders and established Pulumi SDK paths. - [INDIRECT_PROMPT_INJECTION]: As a tool that generates infrastructure code based on user descriptions, it acknowledges the potential for unexpected changes by instructing users to carefully review
pulumi previewoutput before deployment.
Audit Metadata