test-changes
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes several CLI tools to perform project validation and infrastructure planning, including
terraform,tofu,rg(ripgrep),rsync,perl,uv, andgh(GitHub CLI). These are standard tools for managing infrastructure-as-code and CI/CD workflows. - [DYNAMIC_EXECUTION]: In Step 6, a
perlone-liner dynamically modifies thesourceattribute in a temporary configuration file (main.tf) created from an example. This substitution redirects module sourcing from a remote repository to the local checkout for validation purposes. Additionally, the skill usesuv runto execute local Python scripts (scripts/validate_tailscale_large_scale_examples.py,scripts/validate_v3_final_polish_examples.py, andscripts/smoke_v3_plan_matrix.py) which contain specialized validation logic. - [INDIRECT_PROMPT_INJECTION]: The skill operates on files within a local git repository, which presents a surface for processing untrusted data if used on third-party code.
- Ingestion points: Reads and scans Terraform configuration files (
.tf,.tf.json) and project examples from the local worktree. - Boundary markers: None identified.
- Capability inventory: Execution of shell commands, dynamic file modification via
perl, and execution of local Python and shell scripts. - Sanitization: No explicit sanitization or filtering of file contents is performed before they are processed by validation tools or the
perlsubstitution.
Audit Metadata