skills/pulumi/agent-skills/pulumi-esc/Gen Agent Trust Hub

pulumi-esc

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to use the web-fetch tool to retrieve documentation and integration guides from official Pulumi domains (e.g., www.pulumi.com/docs/esc/*). These are trusted, well-known service resources and are considered safe.
  • [COMMAND_EXECUTION]: Provides templates for standard pulumi env and pulumi config CLI commands. These are legitimate operations for the skill's stated purpose of infrastructure management.
  • [CREDENTIALS_SAFE]: The skill specifically focuses on avoiding hardcoded credentials by teaching the use of ESC, OIDC, and dynamic secret providers. It correctly identifies safe practices such as using fn::secret for encryption and environment variables for injection.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 01:57 PM
Security Audit — agent-trust-hub — pulumi-esc