teleport-discovery
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFE
Full Analysis
- [DYNAMIC_EXECUTION]: The skill uses the shell
evalcommand to execute the output oftctl terraform env. This is a standard and documented procedure for the Teleport Terraform provider to export temporary environment variables (credentials) into the local session. The skill explicitly instructs the agent never to print the output of this command to prevent the exposure of secrets. - [INDIRECT_PROMPT_INJECTION]: The skill uses
WebFetchto retrieve troubleshooting information fromgoteleport.com. While this ingests external data into the agent context, the source is the official documentation domain of the vendor (Gravitational), and the data is used for matching diagnostic error codes rather than direct instruction execution. - [EXTERNAL_DOWNLOADS]: The skill configures Terraform to download modules and providers from
terraform.releases.teleport.dev. These are official vendor-managed repositories required for the skill's primary function of infrastructure automation. - [COMMAND_EXECUTION]: The skill utilizes several standard CLI tools, including
tsh,tctl,aws,az, andterraform. These tools are used within their intended scope for cloud resource discovery, identity management, and infrastructure deployment.
Audit Metadata