ansible-automation

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads the official Docker GPG key and repository information from https://download.docker.com. This is a well-known and trusted service for infrastructure automation.
  • [COMMAND_EXECUTION]: Provides standard helper scripts (ansible-deploy.sh, validate-config.sh) and Ansible tasks that execute system-level commands (e.g., apt, systemd, git, docker_container). These are inherent to the skill's primary purpose of configuration management and deployment.
  • [CREDENTIALS_UNSAFE]: Includes placeholder environment variables (e.g., db_password, sentry_dsn, datadog_api_key) in a Jinja2 template (.env.j2). These are standard template placeholders and do not contain hardcoded secrets.
  • [REMOTE_CODE_EXECUTION]: While it installs software via apt and clones code via git, these actions are configured to use static, user-provided URLs (app_repo_url) or official package repositories, posing no unexpected remote execution risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 02:53 PM
Security Audit — agent-trust-hub — ansible-automation