specsfy-specialist-ansible
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions involve executing local management scripts (e.g.,
./deploy) and standard Ansible tooling such asansible-playbookandansible-lintfor automation tasks. - [PRIVILEGE_ESCALATION]: The skill describes operations requiring elevated permissions, specifically the use of Ansible's
becomemodule for task execution and the modification of SSHauthorized_keysto manage deployment access. - [INDIRECT_PROMPT_INJECTION]: The skill acts on external project files which provides a surface for processing untrusted instructions.
- Ingestion points: Project-provided playbooks, roles, inventories, and configuration files (
ansible.cfg,requirements.yml) are read and processed by the agent. - Boundary markers: The skill mandates pre-execution validation using
ansible-playbook --syntax-checkandansible-lintto verify file integrity and compliance. - Capability inventory: The agent can execute local management scripts and modify remote host states through Ansible modules.
- Sanitization: The instructions emphasize the use of
no_log: truefor sensitive tasks and the enforcement of secret encryption viaAnsible Vault.
Audit Metadata