terraform
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides installation instructions for the Terraform CLI that fetch GPG keys and packages from HashiCorp's official repository at
apt.releases.hashicorp.com. These are well-known and trusted infrastructure sources. - [COMMAND_EXECUTION]: Installation documentation includes standard
sudocommands for interacting with the system package manager (apt) and configuring the system keyring. These are required for tool setup and are intended for manual user execution. - [REMOTE_CODE_EXECUTION]: The skill contains a Python script (
scripts/check-updates.py) designed for maintenance. It uses the standardurlliblibrary to fetch the latest version information from the GitHub API (api.github.com) and validates links against HashiCorp's documentation domain. Both network targets are trusted vendors. - [SAFE]: No malicious code, obfuscated payloads, or credential exfiltration patterns were detected. The skill follows security best practices by documenting proper secret handling and state file protection.
Audit Metadata