pulumi-migrate-from-discovered-stack
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard command-line tools including
pulumi,awsCLI, andazCLI to perform migration tasks. These commands are integral to the intended functionality of importing cloud resources into Pulumi management. - [COMMAND_EXECUTION]: The skill includes internal Python scripts (
triage.pyandbuild_import.py) used for processing JSON data from the Pulumi Cloud API. Analysis of these scripts shows they perform safe data transformations and file operations without using dynamic execution or unsafe deserialization. - [EXTERNAL_DOWNLOADS]: The instructions direct the agent to install official Pulumi provider packages (
@pulumi/aws,@pulumi/azure-native,@pulumi/azure) vianpm. These are well-known, trusted packages from the vendor. - [DATA_EXPOSURE]: The skill interacts with the Pulumi Cloud API (
/api/preview/insights/...) to fetch discovery data and manage migration annotations. This communication is restricted to the platform's own backend and is consistent with the skill's purpose.
Audit Metadata