terraform-ops
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and templates for infrastructure-as-code operations that adhere to industry security standards, such as using OIDC for cloud authentication instead of long-lived credentials.
- [EXTERNAL_DOWNLOADS]: The skill includes a bash utility (
scripts/check-action-refs.sh) designed to verify the validity of GitHub Action references in workflow files by querying the official GitHub API. This is a defensive tool used to detect stale or non-existent dependencies in the CI/CD pipeline. - [COMMAND_EXECUTION]: While the skill includes a shell script for maintenance tasks, the script's operations are restricted to parsing local YAML files and performing read-only network requests to a trusted service (GitHub). No unsafe command execution or privilege escalation patterns were identified.
- [DATA_EXFILTRATION]: No patterns of unauthorized data exfiltration were detected. Network activity is limited to resolving repository metadata from well-known GitHub endpoints.
- [PROMPT_INJECTION]: The instructions do not contain any patterns attempting to override agent behavior or bypass safety filters. The language is purely instructional and technical.
Audit Metadata