skills/jeremylongshore/claude-code-plugins-plus-skills/creating-ansible-playbooks/Gen Agent Trust Hub
creating-ansible-playbooks
Pass
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill contains multiple scripts that execute system commands to perform automation tasks.
scripts/validate_playbook.pyuses thesubprocessmodule to runansible-playbook --syntax-checkandansible-lintfor playbook verification.scripts/test_playbook.shutilizesdockerCLI commands to manage test containers, including creating, starting, and executing commands within them.- [EXTERNAL_DOWNLOADS]: The testing utility
scripts/test_playbook.shperforms network operations to set up the test environment. - It pulls the
ubuntu:22.04image from Docker Hub. - It installs system packages (
python3,pip,openssh-client) viaapt-getand theansiblepackage viapipinside the container. - [INDIRECT_PROMPT_INJECTION]: The skill instructions prompt the agent to read existing project files to understand the environment, creating a potential surface for indirect injection if project files are malicious.
- Ingestion points: Reads
ansible.cfg,inventory/,roles/, andgroup_vars/from the project directory (SKILL.md). - Boundary markers: None explicitly defined in the instructions to separate project data from agent instructions.
- Capability inventory: File system access (Read/Write), subprocess execution (
ansible-playbook), and container management (docker). - Sanitization: The skill includes a dedicated security scanner (
scripts/secure_playbook.py) to check for hardcoded credentials and unsafe module usage in generated content.
Audit Metadata