create-infrastructure — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited create-infrastructure (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Generate Harness Infrastructure Definition YAML and push via MCP.
harness_create with resource_type infrastructureinfrastructureDefinition:
name: K8s Production
identifier: k8s_prod
orgIdentifier: default
projectIdentifier: my_project
environmentRef: prod
deploymentType: Kubernetes
type: KubernetesDirect
spec:
connectorRef: k8s_connector
namespace: my-app-prod
releaseName: release-<+INFRA_KEY_SHORT_ID>
allowSimultaneousDeployments: falseinfrastructureDefinition:
name: GKE Cluster
identifier: gke_prod
environmentRef: prod
deploymentType: Kubernetes
type: KubernetesGcp
spec:
connectorRef: gcp_connector
cluster: my-gke-cluster
namespace: my-app
releaseName: release-<+INFRA_KEY_SHORT_ID>infrastructureDefinition:
name: AKS Cluster
identifier: aks_prod
environmentRef: prod
deploymentType: Kubernetes
type: KubernetesAzure
spec:
connectorRef: azure_connector
subscriptionId: <subscription_id>
resourceGroup: my-rg
cluster: my-aks-cluster
namespace: my-app
releaseName: release-<+INFRA_KEY_SHORT_ID>infrastructureDefinition:
name: ECS Fargate
identifier: ecs_prod
environmentRef: prod
deploymentType: ECS
type: ECS
spec:
connectorRef: aws_connector
region: us-east-1
cluster: my-ecs-clusterinfrastructureDefinition:
name: Lambda
identifier: lambda_prod
environmentRef: prod
deploymentType: ServerlessAwsLambda
type: ServerlessAwsLambda
spec:
connectorRef: aws_connector
region: us-east-1
stage: prodinfrastructureDefinition:
name: Azure Web App
identifier: azure_webapp_prod
environmentRef: prod
deploymentType: AzureWebApp
type: AzureWebApp
spec:
connectorRef: azure_connector
subscriptionId: <subscription_id>
resourceGroup: my-rginfrastructureDefinition:
name: ASG Production
identifier: asg_prod
environmentRef: prod
deploymentType: Asg
type: Asg
spec:
connectorRef: aws_connector
region: us-east-1infrastructureDefinition:
name: Cloud Functions
identifier: gcf_prod
environmentRef: prod
deploymentType: GoogleCloudFunctions
type: GoogleCloudFunctions
spec:
connectorRef: gcp_connector
region: us-central1
project: my-gcp-projectinfrastructureDefinition:
name: On-Prem Servers
identifier: pdc_prod
environmentRef: prod
deploymentType: Ssh
type: Pdc
spec:
connectorRef: pdc_connector
hosts:
- host1.example.com
- host2.example.comCall MCP tool: harness_create
Parameters:
resource_type: "infrastructure"
org_id: "<organization>"
project_id: "<project>"
body: <infrastructure YAML><+INFRA_KEY_SHORT_ID> in releaseName to guarantee uniqueness across deployments.CONNECTOR_NOT_FOUND - Create the cloud/K8s connector firstENVIRONMENT_NOT_FOUND - Create the environment firstreleaseName must be unique per deployment; use <+INFRA_KEY_SHORT_ID>deploymentType must match the service definition's type (e.g., Kubernetes service needs KubernetesDirect infra)allowSimultaneousDeployments: false is the default; set to true only if concurrent deploys are safe~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.