opentofu-migration

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the OpenTofu installation script from get.opentofu.org. This is the official installation domain for the project.
  • [EXTERNAL_DOWNLOADS]: References official GitHub Actions such as actions/checkout, opentofu/setup-opentofu, and aws-actions/configure-aws-credentials. These are standard, well-known, and trusted tools in CI/CD environments.
  • [COMMAND_EXECUTION]: The skill documents standard shell commands for IaC workflows (e.g., tofu init, tofu plan, brew install). These are consistent with the skill's primary purpose of infrastructure management and migration.
  • [REMOTE_CODE_EXECUTION]: While the skill contains a curl | bash pattern for installing OpenTofu, it targets the official project domain and is the standard installation method for that tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 08:26 AM