virtualization

Pass

Audited by Gen Agent Trust Hub on Nov 12, 2026

Risk Level: SAFEDATA_EXFILTRATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [DATA_EXFILTRATION]: The skill references local SSH public key paths (~/.ssh/id_ed25519.pub, ~/.ssh/id_rsa.pub) exclusively for the legitimate administrative task of injecting authorized keys into newly created virtual machines via cloud-init. It actively promotes security by instructing against hardcoding passwords or private keys in scripts.
  • [EXTERNAL_DOWNLOADS]: The skill provides procedures for fetching OS images and management plugins from official and trusted repositories belonging to Debian, Ubuntu, Fedora, Alpine, Rocky Linux, and HashiCorp. These downloads are integral to the skill's primary function and target verified technology provider domains.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a capability surface for generating complex hypervisor and infrastructure-as-code configurations based on user requirements. To mitigate potential security risks, it incorporates a comprehensive 'AI Self-Check' list that requires verification of outputs for secure defaults, such as the absence of hardcoded credentials and correct network interface configuration.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 12, 2026, 09:39 AM