testland/policy-as-code-runner
Configures policy-as-code testing using OPA / Conftest / Cedar - authors policies in Rego (OPA's language), runs Conftest against Kubernetes manifests / Terraform plans / Dockerfiles / arbitrary structured data, integrates with CI for PR-time policy gates. Per OPA's docs: "an open source, general-purpose policy engine that unifies policy enforcement across the stack." Use to express + enforce custom policies (cost limits, tagging requirements, security baselines) that Checkov / tfsec / KICS don't cover.
70
88%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Medium
Suggest reviewing before use
Security
1 medium severity finding. This skill can be installed but you should review these findings before use.
W013: Attempt to modify system services in skill instructions.
What this means
The skill prompts the agent to compromise the security or integrity of the user’s machine by modifying system-level services or configurations, such as obtaining elevated privileges, altering startup scripts, or changing system-wide settings.
Why it was flagged
The skill explicitly instructs moving a downloaded binary into /usr/local/bin using sudo, which modifies the host system state and requests elevated privileges.
Low
Low-risk findings.
2 low severity findings. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
SKILL.md describes Conftest/OPA being run on user-provided configuration inputs (e.g., `conftest test deployment.yaml`, Helm-templated manifests, `plan.json`, Dockerfile), but the skill workflow as written does not indicate it ingests any outsider-authored free-text feed/queue without first selecting specific items.
W012: Unverifiable external dependency detected (runtime URL that controls agent).
What this means
The skill fetches instructions or code from an external URL at runtime, and the fetched content directly controls the agent’s prompts or executes code. This dynamic dependency allows the external source to modify the agent’s behavior without any changes to the skill itself.
Why it was flagged
The CI job in SKILL.md downloads and extracts a Conftest tarball at runtime using curl from https://github.com/open-policy-agent/conftest/releases/download/v0.50.0/conftest_0.50.0_Linux_x86_64.tar.gz, which fetches and installs remote executable code the skill relies on.
Where we found it
https://github.[REDACTED].50.0/conftest_0.50.0_Linux_x86_64.tar.gz
url · 1 site
The CI job downloads and extracts a pinned Conftest binary tarball from GitHub at runtime via curl|tar, installing remote executable code.
SKILL.md
181
curl -L https://github.[REDACTED].50.0/conftest_0.50.0_Linux_x86_64.tar.gz | tar xz
actions/checkout@v5
dependency · 1 site
The CI workflow uses the actions/checkout GitHub Action, which is a hosted remote dependency invoked at runtime.
SKILL.md
179
- uses: actions/checkout@v5
- Audited
- Security analysis