cloud-init-crafter
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical reference and template library for
cloud-init. Analysis of the instructions and assets revealed no malicious patterns, prompt injections, or persistence mechanisms. - [EXTERNAL_DOWNLOADS]: The documentation correctly references official sources (e.g.,
docs.cloud-init.io) and uses placeholders (e.g.,example.com,<YOUR_INTERNAL_DOMAIN>) in its examples. The Ansible, Chef, and Puppet module documentation mentions remote installation scripts from well-known services (e.g.,chef.io), which is standard for these technologies. - [DYNAMIC_EXECUTION]: The provided Python script
scripts/validate_config.pyperforms offline validation of YAML syntax. It uses theyaml.safe_load()method, which is a security best practice for parsing untrusted YAML data to prevent arbitrary code execution. - [CREDENTIALS_UNSAFE]: The skill explicitly advises against the use of plaintext passwords, recommending
hashed_passwdand SSH keys instead. The templates provided use clear placeholders (e.g.,<PASSWORD-HASH-HERE>) rather than hardcoded secrets.
Audit Metadata