packer
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill defines a standard build workflow using commands such as
packer build,packer init, andpacker validate. It also provides extensive documentation for shell provisioners that execute system-level scripts (e.g.,scripts/setup.sh,scripts/cleanup.sh) and inline commands for system configuration. - [INDIRECT_PROMPT_INJECTION]: The skill functions as a configuration generator that processes external HCL scripts, shell scripts, and cloud-init YAML data.
- Ingestion points: Ingests user-supplied
.pkr.hclconfiguration files,user-data, and provisioner scripts (e.g.,ansible/configure.yml). - Boundary markers: No specific boundary markers or "ignore" instructions are provided in the reference templates.
- Capability inventory: The environment allows arbitrary shell command execution, network access for dependency resolution, and file system modifications.
- Sanitization: The skill relies on the underlying Packer tool and the user to provide valid and secure inputs; no internal sanitization logic is described.
- [PRIVILEGE_ESCALATION]: The documentation includes templates for configuring passwordless sudo access (
NOPASSWD:ALL) within the target VM images and defines Proxmox RBAC roles (e.g.,VM.Allocate,Sys.Modify) required for the Packer service account. These are standard procedures for building functional base images. - [EXTERNAL_DOWNLOADS]: The skill documents fetching plugins from HashiCorp's official GitHub repository (
github.com/hashicorp/proxmox) via thepacker initcommand. This is a routine part of the tool's functionality for extending builder support.
Audit Metadata