ansible
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: Provides patterns for the
ansible.builtin.commandandansible.builtin.shellmodules, including instructions on ensuring idempotency usingcreates,removes, andchanged_whenparameters. - [DATA_EXFILTRATION]: Includes detailed guidance on using Ansible Vault and HashiCorp Vault for managing sensitive information, with a strong emphasis on using
no_log: trueto prevent secrets from being logged in plaintext (mitigating CVE-2024-8775). - [EXTERNAL_DOWNLOADS]: Documents the use of
ansible-galaxyfor installing collections and roles, as well as pulling container images for Molecule testing from well-known registries like Docker Hub and GHCR. - [PERSISTENCE]: Explains how to manage system services (via
systemdandOpenRC) and cron jobs, and provides a pattern for configuringtmuxautostart in shell profiles for interactive SSH sessions. - [SAFE]: The skill is primarily educational and provides best-practice templates for configuration management. It includes security checklists and awareness of recent CVEs to help users build secure automation.
Audit Metadata