infra-engineer

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to download official CLI tools from verified providers, including the AWS CLI (amazonaws.com) and the Google Cloud CLI (dl.google.com). These domains belong to recognized trusted organizations and represent standard deployment workflows.\n- [REMOTE_CODE_EXECUTION]: Several setup guides include piping installation scripts to a shell, such as the Azure CLI (aka.ms) and Helm. These resources originate from trusted vendors and well-known open-source projects, and the practice is consistent with official vendor documentation for these tools.\n- [COMMAND_EXECUTION]: The utility script scripts/cloudflare_deploy.py uses subprocess.run to interact with the wrangler CLI. It correctly passes command-line arguments as a list rather than a single string, which prevents shell injection vulnerabilities and ensures safe handling of project configuration data.\n- [INDIRECT_PROMPT_INJECTION]: The skill contains utilities like scripts/docker_optimize.py that parse Dockerfiles and other configuration manifests. These scripts use regular expressions and string manipulation to provide optimization suggestions. This process is isolated and descriptive, following best practices for infrastructure-as-code analysis tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 07:29 AM
Security Audit — agent-trust-hub — infra-engineer