skills/poindexter12/waypoint/packer/Gen Agent Trust Hub

packer

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill defines a standard build workflow using commands such as packer build, packer init, and packer validate. It also provides extensive documentation for shell provisioners that execute system-level scripts (e.g., scripts/setup.sh, scripts/cleanup.sh) and inline commands for system configuration.
  • [INDIRECT_PROMPT_INJECTION]: The skill functions as a configuration generator that processes external HCL scripts, shell scripts, and cloud-init YAML data.
  • Ingestion points: Ingests user-supplied .pkr.hcl configuration files, user-data, and provisioner scripts (e.g., ansible/configure.yml).
  • Boundary markers: No specific boundary markers or "ignore" instructions are provided in the reference templates.
  • Capability inventory: The environment allows arbitrary shell command execution, network access for dependency resolution, and file system modifications.
  • Sanitization: The skill relies on the underlying Packer tool and the user to provide valid and secure inputs; no internal sanitization logic is described.
  • [PRIVILEGE_ESCALATION]: The documentation includes templates for configuring passwordless sudo access (NOPASSWD:ALL) within the target VM images and defines Proxmox RBAC roles (e.g., VM.Allocate, Sys.Modify) required for the Packer service account. These are standard procedures for building functional base images.
  • [EXTERNAL_DOWNLOADS]: The skill documents fetching plugins from HashiCorp's official GitHub repository (github.com/hashicorp/proxmox) via the packer init command. This is a routine part of the tool's functionality for extending builder support.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 11:29 PM