iac
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation and reference resource for Infrastructure as Code (IaC) tools, including Terraform, Pulumi, Kubernetes, Docker, and Helm.
- [CREDENTIALS_SAFE]: Code examples (e.g., in
kubernetes/SKILL.mdanddocker/SKILL.md) use obvious placeholders like 'user:pass' or 'devpass' for configuration demonstrations, which is standard documentation practice and does not represent hardcoded secrets. - [EXTERNAL_DOWNLOADS]: The skill references external resources such as official documentation (HashiCorp, Kubernetes, Microsoft) and trusted repositories (Bitnami, Upbound, Dagger), all of which are well-known and reputable sources in the DevOps ecosystem.
- [COMMAND_EXECUTION]: All documented shell commands (e.g.,
kubectl apply,terraform plan,docker compose up) are standard operations for managing infrastructure and do not include any hidden or malicious execution patterns. - [BEST_PRACTICE]: The instructions consistently emphasize security best practices, such as running containers as non-root users, pinning versions for reproducibility, and using dedicated secrets management tools instead of hardcoding credentials.
Audit Metadata