pulumi-best-practices

Warn

Audited by Runlayer on Feb 22, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
2
Flagged
2
Chunks
3
Flagged Files (2)
SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md [1/2] Description: --- name: pulumi-best-practices version: 1.0.0 description: Best practices for writing reliable Pulumi programs.

Tool: SKILL.md [2/2] Description: Encrypted from the start pulumi config set --secret databasePassword hunter2 pulumi config set --secret apiKey sk-1234567890 ``` **In code**: ```typescript const config = new pulumi.Config(); // This retrieves a secret - the value stays encrypted const dbPassword = config.requireSecret("databasePassword"); // Creating outputs from secrets preserves secrecy const connectionString = pulumi.interpolate`postgres://user:${dbPassword}@host/db`; // connectionString is

agents/openai.yamlHIGH
78.3%

Malicious tool definition detected

Tool: agents/openai.yaml Description: interface:

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
2
Files Flagged
2
Chunks Analyzed
3
Analyzed
Feb 22, 2026, 12:05 AM
Security Audit — runlayer — pulumi-best-practices