package-mysql-ha-green
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
greenlauncher script fetches necessary automation logic from the author's verified GitHub repositories (github.com/getcolors/mysql-ha,github.com/getcolors/green, andgithub.com/getcolors/once). These dependencies are pinned to a specific Git commit SHA to ensure integrity and prevent supply chain attacks. - [DYNAMIC_EXECUTION]: The skill uses Babashka's
add-depsfunction to dynamically load and resolve the GitHub-hosted libraries at runtime. This allows the launcher to maintain a small footprint while integrating complex infrastructure logic from trusted source trees. - [COMMAND_EXECUTION]: To manage the cluster, the skill orchestrates the execution of standard infrastructure tools including OpenTofu for resource provisioning, Ansible for node configuration, and SSH for secure communication with cluster members.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from a
colors.ymlconfiguration file to define cluster parameters. - Ingestion points: The
greenscript automatically locates thecolors.ymlfile within the project directory structure. - Boundary markers: Configuration input is limited to a flat YAML map and validated against the YAML 1.2 core schema to prevent malformed or malicious data injection.
- Capability inventory: The ingested configuration drives subsequent OpenTofu and Ansible operations on the database cluster.
- Sanitization: The skill enforces strict separation of concerns by ensuring that only non-secret values are stored in the YAML configuration, while all sensitive credentials must be provided through external environment variables.
Audit Metadata