opentofu-migration
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the OpenTofu installation script from
get.opentofu.org. This is the official installation domain for the project. - [EXTERNAL_DOWNLOADS]: References official GitHub Actions such as
actions/checkout,opentofu/setup-opentofu, andaws-actions/configure-aws-credentials. These are standard, well-known, and trusted tools in CI/CD environments. - [COMMAND_EXECUTION]: The skill documents standard shell commands for IaC workflows (e.g.,
tofu init,tofu plan,brew install). These are consistent with the skill's primary purpose of infrastructure management and migration. - [REMOTE_CODE_EXECUTION]: While the skill contains a
curl | bashpattern for installing OpenTofu, it targets the official project domain and is the standard installation method for that tool.
Audit Metadata