devops-cloud
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: Analysis of the skill instructions and referenced code snippets confirms that the content is a legitimate technical reference for DevOps and Cloud Engineering.
- [EXTERNAL_DOWNLOADS]: The skill references well-known and standard infrastructure tools, including official GitHub Actions (e.g.,
actions/checkout,docker/login-action,azure/k8s-deploy) and community-standard Terraform modules from the Terraform Registry. These references are used for educational configuration examples. - [COMMAND_EXECUTION]: The skill contains example CLI commands for major cloud providers (AWS, GCP, Azure) and container orchestration tools (Kubernetes, Docker). These commands are intended for manual or agent-assisted infrastructure management and follow standard usage patterns.
- [CREDENTIALS_UNSAFE]: While the
docker-compose.ymland secret management examples contain hardcoded credentials (e.g.,POSTGRES_PASSWORD: pass,password: "xxx"), these are clearly identifiable as non-functional placeholders used for demonstration purposes. The skill explicitly promotes the use of dedicated secrets management services as a security best practice.
Audit Metadata