programming
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill promotes the use of Checkov, a static analysis tool, to identify security and compliance issues in Terraform infrastructure code.
- [SAFE]: A 'Nixpkgs Verification Gate' is defined in 'references/terraform-development.md' to prevent the execution of tools with known security vulnerabilities, specifically referencing CVE-2024-23342 in the ecdsa package as an example of a blocked transitive dependency.
- [SAFE]: The skill provides guidance on secure tool installation, favoring project-local virtual environments (uv, poetry) and official installation paths over insecure global overrides or 'permittedInsecurePackages' configurations.
- [SAFE]: It encourages the use of industry-standard linting, type-checking, and unit testing tools (ruff, pyright, pytest, shellcheck) to maintain code quality and safety.
Audit Metadata