devops-engineer
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill documentation and reference files provide various shell scripts and CLI command examples for automation.
references/incident-response.mdcontains a forensic evidence collection script (collect-evidence.sh) that executes powerful commands includingkubectl logs,kubectl exec(runningtcpdump), andpsqlto gather system and database state.references/platform-engineering.mdandreferences/release-automation.mdinclude scripts for repository management using the GitHub CLI (gh), container operations usingdocker, and infrastructure updates usingterraform.- [EXTERNAL_DOWNLOADS]: The CI/CD workflow templates reference external components and security tools from well-known technology services.
references/github-actions.mdandreferences/release-automation.mduse standard GitHub Actions such asaquasecurity/trivy-actionfor vulnerability scanning andsigstore/cosign-installerfor artifact signing.- [CREDENTIALS_UNSAFE]:
references/kubernetes.mdincludes a Kubernetes Secret manifest example containing hardcoded dummy credentials (postgres://user:pass@host:5432/db). These are used as placeholders within the documentation rather than active secrets.
Audit Metadata