cloud-weaver-playbook
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements robust input validation by requiring the agent to match recipe names and configuration inputs against the regular expression
[a-z0-9_], reducing the risk of injection attacks. - [SAFE]: Security best practices for credential handling are enforced, instructing the agent to collect sensitive API keys through secure environment variables rather than within the conversation flow.
- [SAFE]: The instructions explicitly forbid passing raw user input directly to commands, which is a key defense against command injection vulnerabilities.
- [SAFE]: Cryptographically secure secret generation is performed using the standard Python
secretsmodule, and the skill encourages the use of.envfiles for local secret management. - [SAFE]: The skill uses a 'pre-flight check' pattern to ensure the local environment is properly configured (e.g., SSH keys, GitHub authentication) before proceeding with provisioning tasks.
Audit Metadata