infrastructure-as-code-guardian
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill provides extensive security hardening guidelines, including checklists for IAM least privilege, secret management, and network isolation, aligning with industry standards like CIS benchmarks and SOC 2. The authoring guidelines specifically advocate for the use of secure backends, encrypted state files, and the avoidance of hardcoded credentials.
- [COMMAND_EXECUTION]: The provided scripts (
validate-iac.sh,security-scan-iac.sh, anddrift-check.sh) are designed to automate infrastructure auditing and validation. They invoke legitimate, well-known CLI tools such asterraform,pulumi,aws,az,gitleaks, andcheckov. These executions are limited to the user-specified directory and are central to the skill's utility as a DevOps assistant. - [DATA_EXFILTRATION]: The drift detection workflow includes a feature to send status alerts to a Slack webhook. This functionality is common in CI/CD pipelines and requires explicit user configuration via a variable or argument, posing no risk of unauthorized data transfer.
Audit Metadata