teleport-discovery

Pass

Audited by Gen Agent Trust Hub on Nov 3, 2026

Risk Level: SAFE
Full Analysis
  • [DYNAMIC_EXECUTION]: The skill uses the shell eval command to execute the output of tctl terraform env. This is a standard and documented procedure for the Teleport Terraform provider to export temporary environment variables (credentials) into the local session. The skill explicitly instructs the agent never to print the output of this command to prevent the exposure of secrets.
  • [INDIRECT_PROMPT_INJECTION]: The skill uses WebFetch to retrieve troubleshooting information from goteleport.com. While this ingests external data into the agent context, the source is the official documentation domain of the vendor (Gravitational), and the data is used for matching diagnostic error codes rather than direct instruction execution.
  • [EXTERNAL_DOWNLOADS]: The skill configures Terraform to download modules and providers from terraform.releases.teleport.dev. These are official vendor-managed repositories required for the skill's primary function of infrastructure automation.
  • [COMMAND_EXECUTION]: The skill utilizes several standard CLI tools, including tsh, tctl, aws, az, and terraform. These tools are used within their intended scope for cloud resource discovery, identity management, and infrastructure deployment.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 3, 2026, 01:11 AM