infrastructure-as-code
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: Structural templates provided by the skill for generating OCI Terraform code create an ingestion surface where user-provided inputs like resource OCIDs or CIDR blocks are interpolated into configuration files.
- Ingestion points: Terraform generation requests defined in
SKILL.mdandreferences/oci-terraform-patterns.md. - Boundary markers: No explicit delimiters or boundary markers are defined in the instructions for user input interpolation.
- Capability inventory: The skill is intended for use in environments with Terraform and OCI CLI access, which typically includes file system writes and shell command execution.
- Sanitization: The skill does not provide explicit input validation or sanitization instructions for external data provided during code generation.
- [EXTERNAL_DOWNLOADS]: The skill references official infrastructure modules from Oracle's GitHub organization (
oracle-terraform-modules/landing-zone/oci). These resources are documented as established industry best practices for OCI foundations and are sourced from a well-known service provider.
Audit Metadata