ansible-coder

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill includes instructions to install Docker using its official convenience script from https://get.docker.com piped directly into a shell. This is a common installation pattern provided by the official service provider.
  • [COMMAND_EXECUTION]: Uses shell commands to automate the generation of inventory files and the execution of playbooks. This includes interpolating output from infrastructure management tools like OpenTofu/Terraform into local files.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow where data from external tool outputs is used to construct configuration files for subsequent execution.
  • Ingestion points: references/provision-script.md (capturing output from tofu output).
  • Boundary markers: None identified in the script generation phase.
  • Capability inventory: The skill utilizes the Bash tool to run ansible-playbook and other CLI utilities.
  • Sanitization: None identified for the external variables used in inventory generation.
  • [SAFE]: Implements several security best practices for server management, including recommendations for disabling SSH password authentication, configuring ufw firewall policies, and setting up fail2ban for intrusion prevention. It also recommends using .gitignore for sensitive inventory files containing host information.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 12:28 AM