pulumi-infrastructure
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill provides infrastructure-as-code templates and documentation based on official, well-known libraries from Pulumi and Google Cloud. No malicious behavior, obfuscation, or unauthorized data exfiltration attempts were detected.
- [COMMAND_EXECUTION]: The skill includes a local shell script (
scripts/init-project.sh) designed to scaffold the project structure. The script performs standard file and directory operations and is intended for initialization by the developer or agent. - [CREDENTIALS_UNSAFE]: The documentation includes placeholders for sensitive configuration (e.g.,
pul-xxxxxfor an access token). The skill correctly instructs users to manage secrets using Pulumi's native encryption and GCP Secret Manager rather than hardcoding them.
Audit Metadata