ansible-coder
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill includes instructions to install Docker using its official convenience script from
https://get.docker.compiped directly into a shell. This is a common installation pattern provided by the official service provider. - [COMMAND_EXECUTION]: Uses shell commands to automate the generation of inventory files and the execution of playbooks. This includes interpolating output from infrastructure management tools like OpenTofu/Terraform into local files.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow where data from external tool outputs is used to construct configuration files for subsequent execution.
- Ingestion points:
references/provision-script.md(capturing output fromtofu output). - Boundary markers: None identified in the script generation phase.
- Capability inventory: The skill utilizes the
Bashtool to runansible-playbookand other CLI utilities. - Sanitization: None identified for the external variables used in inventory generation.
- [SAFE]: Implements several security best practices for server management, including recommendations for disabling SSH password authentication, configuring
ufwfirewall policies, and setting upfail2banfor intrusion prevention. It also recommends using.gitignorefor sensitive inventory files containing host information.
Audit Metadata