cloud-dev-setup
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard system setup commands via Homebrew (
brew install) and official cloud CLI initialization wizards (e.g.,aws configure sso,gcloud init). These are appropriate for the skill's stated purpose of machine setup. - [EXTERNAL_DOWNLOADS]: The skill downloads software from well-known and trusted cloud service providers including AWS, Microsoft Azure, Google Cloud, HashiCorp, and Databricks. These references are documented neutrally and follow official installation guidelines.
- [PERSISTENCE_MECHANISMS]: The skill adds a standard shell completion line to
~/.zshrcforkubectl(source <(kubectl completion zsh)). This is a routine developer productivity enhancement and does not constitute a malicious persistence mechanism. - [CREDENTIALS_SAFE]: The skill explicitly instructs against creating long-lived static keys. It mandates the use of short-lived OAuth tokens and SSO profiles, which is the current industry standard for secure cloud authentication. It correctly warns the user not to paste identity verification outputs (account IDs, emails) into the chat session.
Audit Metadata