infrastructure-testing

45 / 100 · High risk

Only if you trust the author. Some of what it can do is expected: a coding skill usually runs build and test commands.

By UitbreidenOS/UitKit (GitHub) · coding · 14 stars · scanned at commit 5b6423f

Works with any agent that supports SKILL.md skills.

What this skill can do

Runs commands on your computer

The author does not mention this. It runs automatically when the plugin is installed. Expected for a coding skill.

Found in 15 places.

professional-stacks/infrastructure_as_code_stack/skills/infrastructure-testing/SKILL.md, line 19terraform fmt -check -recursive .
professional-stacks/infrastructure_as_code_stack/skills/infrastructure-testing/SKILL.md, line 44terraform plan -out=tfplan
professional-stacks/infrastructure_as_code_stack/skills/infrastructure-testing/SKILL.md, line 117terraform plan -json | jq -s > tfplan.json

Show 12 more

professional-stacks/infrastructure_as_code_stack/skills/infrastructure-testing/SKILL.md, line 135kubeval -d kubernetes/manifests/ --skip-kinds NetworkPolicy
professional-stacks/infrastructure_as_code_stack/skills/infrastructure-testing/SKILL.md, line 178terraform refresh
professional-stacks/infrastructure_as_code_stack/skills/infrastructure-testing/SKILL.md, line 200tfsec . --minimum-severity HIGH
professional-stacks/infrastructure_as_code_stack/skills/infrastructure-testing/SKILL.md, line 216set -e
hooks/notification/sound-system.md, line 139subprocess.Popen(["afplay", path], stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL)
hooks/notification/sound-system.md, line 159subprocess.Popen(
hooks/notification/sound-system.md, line 160player, stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL
hooks/post-tool-use/telegram-pr-notify.md, line 52remote = subprocess.check_output(
hooks/post-tool-use/telegram-pr-notify.md, line 54stderr=subprocess.DEVNULL, text=True
hooks/post-tool-use/telegram-pr-notify.md, line 66return subprocess.check_output(
hooks/post-tool-use/telegram-pr-notify.md, line 68stderr=subprocess.DEVNULL, text=True
hooks/usage-tracker.sh, line 149"git_branch": os.popen("git rev-parse --abbrev-ref HEAD 2>/dev/null").read().strip() or "unknown",

Downloads and installs other software

The author does not mention this.

Found in 127 places.

README.md, line 36npx uitkit add all
README.md, line 74Every skill is validated with `claude plugin validate --strict`. Prefer npm? `npx uitkit add all` still works.
README.md, line 160Claude Code is Anthropic's official command-line AI assistant for software development. It runs in your terminal or IDE (VS Code, JetBrains), reads your codebas

Show 17 more

README.md, line 172Run `npx uitkit add all` to install everything, or use the Claude Code plugin system: `/plugin marketplace add UitbreidenOS/UitKit` then `/plugin install uitkit
README.md, line 182| SDR / Sales Rep | `npx uitkit add skill gtm/sdr-research-brief` | [Guide](guides/for-sdr.md) |
README.md, line 183| Founder / CEO | `npx uitkit add skill gtm/founder-operating-system` | [Guide](guides/for-founder.md) |
README.md, line 184| Product Manager | `npx uitkit add skill product/product-discovery` | [Guide](guides/for-product-manager.md) |
README.md, line 185| DevOps / Platform Engineer | `npx uitkit add skill devops-infra/kubernetes-architect` | [Guide](guides/for-devops-engineer.md) |
README.md, line 186| Content Marketer / SEO | `npx uitkit add skill marketing/seo-audit` | [Guide](guides/for-content-marketer.md) |
README.md, line 187| Finance Analyst / CFO | `npx uitkit add skill finance/dcf-model` | [Guide](guides/for-finance-analyst.md) |
README.md, line 188| Legal / Compliance Officer | `npx uitkit add skill legal/contract-review` | [Guide](guides/for-legal-compliance.md) |
README.md, line 189| Growth Hacker / Performance Marketer | `npx uitkit add skill marketing/paid-ads` | [Guide](guides/for-growth-marketer.md) |
README.md, line 190| Customer Success Manager | `npx uitkit add skill gtm/customer-success` | [Guide](guides/for-customer-success.md) |
README.md, line 191| Recruiter / HR | `npx uitkit add skill small-business/hiring-pipeline` | [Guide](guides/for-recruiter.md) |
README.md, line 192| UX Designer / Researcher | `npx uitkit add skill product/ux-research` | [Guide](guides/for-ux-designer.md) |
README.md, line 193| Technical Writer | `npx uitkit add skill productivity/adr-writer` | [Guide](guides/for-technical-writer.md) |
README.md, line 194| Account Executive | `npx uitkit add skill gtm/deal-desk` | [Guide](guides/for-account-executive.md) |
README.md, line 195| Operations Manager / COO | `npx uitkit add skill small-business/sop-writer` | [Guide](guides/for-operations-manager.md) |
README.md, line 196| Email Marketer | `npx uitkit add skill gtm/email-automation` | [Guide](guides/for-email-marketer.md) |
README.md, line 197| E-commerce Operator | `npx uitkit add skill small-business/ecommerce-seller` | [Guide](guides/for-ecommerce-operator.md) |

and 107 more places

Sends data to these websites: splunk.company.com

The author does not mention this. It runs automatically when the plugin is installed.

Found in 43 places.

enterprise/AUDIT_TRAIL.md, line 171curl -X POST https://splunk.company.com:8088/services/collector \
enterprise/AUDIT_TRAIL.md, line 183jq -Rs "curl -X POST $SLACK_WEBHOOK -H 'Content-Type: application/json' -d '{\"text\": \"Compliance alert: \(.)\"}'"
hooks/cost-cap-enforcer.md, line 209"WebFetch": 0.01,

Show 17 more

hooks/cost-cap-enforcer.sh, line 161"WebFetch" | "WebSearch")
hooks/notification/de/ntfy-push.md, line 46curl -s \
hooks/notification/de/slack-notify.md, line 61curl -s -X POST \
hooks/notification/es/ntfy-push.md, line 46curl -s \
hooks/notification/es/slack-notify.md, line 61curl -s -X POST \
hooks/notification/fr/ntfy-push.md, line 46curl -s \
hooks/notification/fr/slack-notify.md, line 61curl -s -X POST \
hooks/notification/nl/ntfy-push.md, line 46curl -s \
hooks/notification/nl/slack-notify.md, line 61curl -s -X POST \
hooks/notification/ntfy-push.md, line 46curl -s \
hooks/notification/ntfy-push.sh, line 10curl -s \
hooks/notification/slack-notify.md, line 61curl -s -X POST \
hooks/notification/slack-notify.sh, line 19curl -s -X POST -H "Content-Type: application/json" -d "$PAYLOAD" "$WEBHOOK" > /dev/null
hooks/permission/de/permission-denied-alert.md, line 96curl -s -X POST -H 'Content-type: application/json' \
hooks/permission/es/permission-denied-alert.md, line 96curl -s -X POST -H 'Content-type: application/json' \
hooks/permission/fr/permission-denied-alert.md, line 96curl -s -X POST -H 'Content-type: application/json' \
hooks/permission/nl/permission-denied-alert.md, line 96curl -s -X POST -H 'Content-type: application/json' \

and 23 more places

Reads your saved credentials, such as SSH keys or .env files

The author does not mention this. It runs automatically when the plugin is installed.

Found in 10 places.

hooks/advanced/de/prompt-hook-guard.md, line 59"prompt": "You are a security gate for a developer's AI coding assistant. You will receive the name and input of a shell command that the assistant is about to
hooks/advanced/de/prompt-hook-guard.md, line 70"prompt": "You are a file-write security gate. Evaluate the file path and content about to be written.\n\nBLOCK if the path is:\n- /etc/ or any system config di
hooks/advanced/es/prompt-hook-guard.md, line 59"prompt": "You are a security gate for a developer's AI coding assistant. You will receive the name and input of a shell command that the assistant is about to

Show 7 more

hooks/advanced/es/prompt-hook-guard.md, line 70"prompt": "You are a file-write security gate. Evaluate the file path and content about to be written.\n\nBLOCK if the path is:\n- /etc/ or any system config di
hooks/advanced/fr/prompt-hook-guard.md, line 59"prompt": "You are a security gate for a developer's AI coding assistant. You will receive the name and input of a shell command that the assistant is about to
hooks/advanced/fr/prompt-hook-guard.md, line 70"prompt": "You are a file-write security gate. Evaluate the file path and content about to be written.\n\nBLOCK if the path is:\n- /etc/ or any system config di
hooks/advanced/nl/prompt-hook-guard.md, line 59"prompt": "You are a security gate for a developer's AI coding assistant. You will receive the name and input of a shell command that the assistant is about to
hooks/advanced/nl/prompt-hook-guard.md, line 70"prompt": "You are a file-write security gate. Evaluate the file path and content about to be written.\n\nBLOCK if the path is:\n- /etc/ or any system config di
hooks/advanced/prompt-hook-guard.md, line 59"prompt": "You are a security gate for a developer's AI coding assistant. You will receive the name and input of a shell command that the assistant is about to
hooks/advanced/prompt-hook-guard.md, line 70"prompt": "You are a file-write security gate. Evaluate the file path and content about to be written.\n\nBLOCK if the path is:\n- /etc/ or any system config di

Changes files outside its own folder

The author does not mention this. It runs automatically when the plugin is installed.

Found in 233 places.

hooks/advanced/de/prompt-hook-guard.md, line 59"prompt": "You are a security gate for a developer's AI coding assistant. You will receive the name and input of a shell command that the assistant is about to
hooks/advanced/es/prompt-hook-guard.md, line 59"prompt": "You are a security gate for a developer's AI coding assistant. You will receive the name and input of a shell command that the assistant is about to
hooks/advanced/fr/prompt-hook-guard.md, line 59"prompt": "You are a security gate for a developer's AI coding assistant. You will receive the name and input of a shell command that the assistant is about to

Show 17 more

hooks/advanced/nl/prompt-hook-guard.md, line 59"prompt": "You are a security gate for a developer's AI coding assistant. You will receive the name and input of a shell command that the assistant is about to
hooks/advanced/prompt-hook-guard.md, line 59"prompt": "You are a security gate for a developer's AI coding assistant. You will receive the name and input of a shell command that the assistant is about to
hooks/audit-logger.md, line 84cp hooks/audit-logger.sh .claude/hooks/
hooks/context/de/file-changed-reload.md, line 139cp hooks/context/file-changed-reload.sh .claude/hooks/
hooks/context/de/pre-compact-snapshot.md, line 90cp hooks/context/pre-compact-snapshot.sh .claude/hooks/
hooks/context/es/file-changed-reload.md, line 139cp hooks/context/file-changed-reload.sh .claude/hooks/
hooks/context/es/pre-compact-snapshot.md, line 90cp hooks/context/pre-compact-snapshot.sh .claude/hooks/
hooks/context/file-changed-reload.md, line 139cp hooks/context/file-changed-reload.sh .claude/hooks/
hooks/context/fr/file-changed-reload.md, line 139cp hooks/context/file-changed-reload.sh .claude/hooks/
hooks/context/fr/pre-compact-snapshot.md, line 90cp hooks/context/pre-compact-snapshot.sh .claude/hooks/
hooks/context/nl/file-changed-reload.md, line 139cp hooks/context/file-changed-reload.sh .claude/hooks/
hooks/context/nl/pre-compact-snapshot.md, line 90cp hooks/context/pre-compact-snapshot.sh .claude/hooks/
hooks/context/pre-compact-snapshot.md, line 90cp hooks/context/pre-compact-snapshot.sh .claude/hooks/
hooks/cost-cap-enforcer.md, line 110cp hooks/cost-cap-enforcer.sh .claude/hooks/
hooks/de/usage-tracker.md, line 86cp hooks/usage-tracker.sh .claude/hooks/
hooks/es/usage-tracker.md, line 86cp hooks/usage-tracker.sh .claude/hooks/
hooks/fr/usage-tracker.md, line 86cp hooks/usage-tracker.sh .claude/hooks/

and 213 more places

Safer alternatives

Low-risk skills in the same category (coding) that look related. Check that one does what you need.

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'infrastructure-testing' ] || [ -L ~/.agents/skills/'infrastructure-testing' ]; then echo 'A skill folder named infrastructure-testing already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/UitbreidenOS/UitKit' "$d" && git -C "$d" checkout --quiet '5b6423fe6699510797bc4314aa74c6a4f2258a1e' -- 'professional-stacks/infrastructure_as_code_stack/skills/infrastructure-testing' && mkdir -p ~/.agents/skills && cp -R "$d"/'professional-stacks/infrastructure_as_code_stack/skills/infrastructure-testing' ~/.agents/skills/'infrastructure-testing' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'infrastructure-testing' ~/.claude/skills/'infrastructure-testing' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for UitbreidenOS/UitKit shows the score of its lowest-scoring skill.

SkillTrust badge for UitbreidenOS/UitKit

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/UitbreidenOS/UitKit.svg)](https://zalavijaysinh.github.io/skilltrust/repos/UitbreidenOS/UitKit/)

Score history

Date	Version	Score
2026-11-08	`5b6423f`	45