infrastructure
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes bash scripts to perform environment discovery and project management. It executes commands to detect installed versions of DevOps tools (e.g.,
terraform version,aws --version,pulumi version) and scans local directories for existing configuration files usinggrepandfind. - [EXTERNAL_DOWNLOADS]: The documentation provides instructions for installing industry-standard infrastructure tools. These include references to official repositories and domains managed by HashiCorp, Amazon Web Services (AWS), and Pulumi. These resources are from established technology providers.
- [SAFE]: The skill incorporates significant security and operational best practices. It automatically generates
.gitignorefiles to prevent the accidental commitment of sensitive infrastructure state files (.tfstate) and credential variables (.tfvars). - [SAFE]: It employs a local caching strategy in the
.claude/cache/directory to minimize redundant processing. It also generates templates that enable security features by default, such as server-side encryption for S3 buckets and public access blocks. - [SAFE]: User-supplied arguments are processed using restrictive regular expression filtering (e.g.,
grep -oE "terraform|cloudformation|pulumi"), which effectively mitigates the risk of command injection from malicious input.
Audit Metadata