iac

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a documentation and reference resource for Infrastructure as Code (IaC) tools, including Terraform, Pulumi, Kubernetes, Docker, and Helm.
  • [CREDENTIALS_SAFE]: Code examples (e.g., in kubernetes/SKILL.md and docker/SKILL.md) use obvious placeholders like 'user:pass' or 'devpass' for configuration demonstrations, which is standard documentation practice and does not represent hardcoded secrets.
  • [EXTERNAL_DOWNLOADS]: The skill references external resources such as official documentation (HashiCorp, Kubernetes, Microsoft) and trusted repositories (Bitnami, Upbound, Dagger), all of which are well-known and reputable sources in the DevOps ecosystem.
  • [COMMAND_EXECUTION]: All documented shell commands (e.g., kubectl apply, terraform plan, docker compose up) are standard operations for managing infrastructure and do not include any hidden or malicious execution patterns.
  • [BEST_PRACTICE]: The instructions consistently emphasize security best practices, such as running containers as non-root users, pinning versions for reproducibility, and using dedicated secrets management tools instead of hardcoding credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 02:37 PM