pantheon-ai/ansible-validator
Comprehensive toolkit for validating, linting, testing, and automating Ansible playbooks, roles, and collections. Use this skill when working with Ansible files (.yml, .yaml playbooks, roles, inventories), validating automation code, debugging playbook execution, performing dry-run testing with check mode, or working with custom modules and collections.
80
100%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
The skill's SKILL.md explicitly instructs the agent to "Lookup docs via Context7 MCP or WebSearch" during Custom Module/Collection Analysis (and the test README suggests cloning roles from public GitHub/Galaxy), which requires fetching and interpreting untrusted public web content that can materially influence validation and follow-up actions.
Where we found it
context7
domain · 3 sites
The SKILL.md explicitly instructs the agent to fetch documentation from Context7 MCP via mcp__context7__resolve-library-id and mcp__context7__get-library-docs during Custom Module/Collection Analysis, which reads untrusted public content at runtime.
SKILL.md
45
Lookup docs via Context7 MCP or WebSearch
SKILL.md
140
`mcp__context7__resolve-library-id` with collection name
SKILL.md
141
`mcp__context7__get-library-docs` for specific module
WebSearch
domain · 2 sites
The SKILL.md explicitly instructs the agent to use WebSearch to look up documentation for custom/private Ansible collections, which fetches and interprets untrusted public web content at runtime.
SKILL.md
45
Lookup docs via Context7 MCP or WebSearch
SKILL.md
143
**For custom/private collections** — use WebSearch:
- Audited
- Security analysis