skills/jeremylongshore/tons-of-skills-marketplace/generating-infrastructure-as-code/Gen Agent Trust Hub
generating-infrastructure-as-code
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The utility script
scripts/iac_generate.pygenerates shell scripts (.sh) based on provided content and explicitly applies executable permissions usingchmod 0o755. - [INDIRECT_PROMPT_INJECTION]: The skill's instructions require the agent to scan existing codebase files to understand infrastructure patterns, which serves as a potential vector for malicious instructions embedded in project data. Ingestion points: Local project files scanned during Step 2 of the instructions in
SKILL.md. Boundary markers: Absent. Capability inventory: Extensive use ofBashfor cloud CLIs (aws,gcloud,az) and IaC tools (terraform,pulumi), along with fileWritecapabilities and dynamic script generation inscripts/iac_generate.py. Sanitization: Absent. - [COMMAND_EXECUTION]: The skill instructions and metadata leverage powerful system commands and cloud provider CLIs to perform infrastructure management tasks.
Audit Metadata