Security audit
Security checks for vulnerabilities and agentic risk
The skill is a sparse cloud automation guide, but it presents production infrastructure creation and destruction commands without safety scoping or warnings.
Review this skill carefully before installing or using it. It does not appear deceptive or bundled with executable code, but its examples normalize applying and destroying production infrastructure without safety checks. Treat any production command as high risk: require plans or dry runs, explicit confirmation, state backups, environment verification, and least-privilege cloud credentials.
The skill explicitly documents a destructive command (./cloud.sh destroy prod) without any warning, confirmation guidance, or indication of the scope of impact. In an infrastructure automation context, this is operationally dangerous because users may run the command against production resources and irreversibly delete live infrastructure, data stores, or dependent services.
No suspicious patterns detected.
