cloud-init-crafter

Pass

Audited by Gen Agent Trust Hub on Sep 11, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a technical reference and template library for cloud-init. Analysis of the instructions and assets revealed no malicious patterns, prompt injections, or persistence mechanisms.
  • [EXTERNAL_DOWNLOADS]: The documentation correctly references official sources (e.g., docs.cloud-init.io) and uses placeholders (e.g., example.com, <YOUR_INTERNAL_DOMAIN>) in its examples. The Ansible, Chef, and Puppet module documentation mentions remote installation scripts from well-known services (e.g., chef.io), which is standard for these technologies.
  • [DYNAMIC_EXECUTION]: The provided Python script scripts/validate_config.py performs offline validation of YAML syntax. It uses the yaml.safe_load() method, which is a security best practice for parsing untrusted YAML data to prevent arbitrary code execution.
  • [CREDENTIALS_UNSAFE]: The skill explicitly advises against the use of plaintext passwords, recommending hashed_passwd and SSH keys instead. The templates provided use clear placeholders (e.g., <PASSWORD-HASH-HERE>) rather than hardcoded secrets.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 11, 2026, 03:10 PM
Security Audit — agent-trust-hub — cloud-init-crafter