terraform-ops

Pass

Audited by Gen Agent Trust Hub on Jul 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation and templates for infrastructure-as-code operations that adhere to industry security standards, such as using OIDC for cloud authentication instead of long-lived credentials.
  • [EXTERNAL_DOWNLOADS]: The skill includes a bash utility (scripts/check-action-refs.sh) designed to verify the validity of GitHub Action references in workflow files by querying the official GitHub API. This is a defensive tool used to detect stale or non-existent dependencies in the CI/CD pipeline.
  • [COMMAND_EXECUTION]: While the skill includes a shell script for maintenance tasks, the script's operations are restricted to parsing local YAML files and performing read-only network requests to a trusted service (GitHub). No unsafe command execution or privilege escalation patterns were identified.
  • [DATA_EXFILTRATION]: No patterns of unauthorized data exfiltration were detected. Network activity is limited to resolving repository metadata from well-known GitHub endpoints.
  • [PROMPT_INJECTION]: The instructions do not contain any patterns attempting to override agent behavior or bypass safety filters. The language is purely instructional and technical.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 9, 2026, 06:30 PM
Security Audit — agent-trust-hub — terraform-ops