pulumi-overview
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends using
npx pulumi, which downloads the latest version of the Pulumi CLI from the official npm registry if it is not already available in the environment. This is a standard operation for using well-known development tools and is sourced from a reputable registry.- [COMMAND_EXECUTION]: The skill's primary purpose is to guide the execution ofpulumicommands for provisioning and managing cloud resources. It includes safety protocols, such as usingpreviewbeforeupand requiring explicit user confirmation before running thedestroycommand.- [CREDENTIALS_SAFE]: The skill manages cloud provider credentials using standard practices like environment variables and Pulumi's built-in secret management. It proactively instructs the agent to avoid capturing sensitive credential outputs in logs or transcripts, adhering to data protection best practices.- [DYNAMIC_EXECUTION]: The skill utilizes templates to bootstrap infrastructure projects in several programming languages (TypeScript, Python, Go, etc.). This runtime code generation is a legitimate and core functionality of the Pulumi framework for initializing new infrastructure projects.
Audit Metadata