devops
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/cloudflare_deploy.pyscript utilizessubprocess.runto interface with thewranglerCLI. It correctly passes commands as lists of arguments, avoiding the security risks associated with shell interpolation.\n- [EXTERNAL_DOWNLOADS]: Reference documentation for Google Cloud and Kubernetes provides instructions for installing official CLI tools and manifests from trusted domains likegoogle.comandgithub.com. These downloads are standard for the platforms and follow official installation procedures.\n- [CREDENTIALS_UNSAFE]: The skill provides an.env.examplefile as a template for environment variables. It explicitly instructs users to avoid committing actual credentials and suggests the use of placeholders, promoting secure credential management.\n- [SAFE]: Overall, the skill provides legitimate utility for infrastructure management. The included scripts, such asscripts/docker_optimize.py, even incorporate security checks to help users identify potential vulnerabilities in their own configurations.
Audit Metadata