devops-engineer

Pass

Audited by Gen Agent Trust Hub on Jul 15, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes various automation scripts (Bash, Python) for tasks such as infrastructure provisioning, service creation, and incident forensics. These scripts utilize standard tools like kubectl, terraform, docker, and gh. These operations are typical for a DevOps role and are documented with appropriate context and warnings.
  • [EXTERNAL_DOWNLOADS]: The provided CI/CD and Docker templates reference well-known and trusted external resources, including official GitHub Actions from actions/, docker/, and aquasecurity/, as well as standard base images from Docker Hub. These dependencies are standard in modern development workflows.
  • [CREDENTIALS_UNSAFE]: The skill demonstrates a strong security posture by explicitly prohibiting the storage of secrets in code or environment variables, instead mandating the use of dedicated secret managers (e.g., AWS Secrets Manager, Vault).
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 15, 2026, 04:40 PM
Security Audit — agent-trust-hub — devops-engineer