Infra Wrapper
v1.0.0Terragrunt is a flexible orchestration tool that allows Infrastructure as Code written in OpenTofu/T terraform-wrapper, go, aws, cli, developer-tools.
⭐ 0· 84·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description say it's a Terragrunt/Infra wrapper for recording and analyzing runs; the code implements a local logging utility that records timestamped entries, exports/searches them, and reports status. No access to unrelated services or credentials is requested.
Instruction Scope
SKILL.md and the script limit actions to local logging, searching, exporting, and status checks in ~/.local/share/infra-wrapper. Note: the tool records arbitrary user-provided command strings — if you log commands that include secrets or credentials, those will be stored in plaintext logs. Exports (json/csv/txt) will include those entries.
Install Mechanism
There is no install spec and no remote download; the skill is instruction-only and includes a local shell script. Nothing is fetched from external URLs or installed system-wide by the skill.
Credentials
The skill requests no environment variables, no credentials, and no config paths beyond writing to ~/.local/share/infra-wrapper. This is proportionate to a local logging utility.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system-wide settings, and only persists its own log files under the user's home directory.
Assessment
This skill is a local logger for infra commands and appears to do only file I/O under ~/.local/share/infra-wrapper. Before installing or using it: inspect the script yourself, and be careful not to pass secrets or long-lived credentials on the command line (they will be saved in plaintext logs and included in exports). Consider restricting the data directory permissions (chmod 700 ~/.local/share/infra-wrapper), deleting sensitive log entries, or running the tool in an isolated environment if you need caution. If you expect any network behavior or external integrations, verify the author/source — this package has no homepage and comes from an unknown source.Like a lobster shell, security has layers — review code before you run it.
latestvk97bfbrb525zq4bwt4j71t467d8399qh
License
MIT-0
Free to use, modify, and redistribute. No attribution required.