terraform-cli-setup
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands to manage system packages and verify installation status. This includes the use of
sudoforapt-getandyumoperations inSKILL.md, andsubprocess.runinscripts/setup_terraform.pyto executebrewandterraformcommands. - [EXTERNAL_DOWNLOADS]: The skill downloads compressed binaries from
releases.hashicorp.comand queries version metadata fromcheckpoint-api.hashicorp.com. These are official, well-known services maintained by Hashicorp. - [PROMPT_INJECTION]: The skill contains instructions for the agent to autonomously interpret tool outputs and execute corrective actions without user intervention. This represents an indirect prompt injection surface (Category 8):
- Ingestion points: Terminal output and error messages from
terraform initandterraform validatecommands. - Boundary markers: Absent; the agent is encouraged to directly follow logic derived from command output.
- Capability inventory: The skill has the ability to execute shell commands with
sudo, perform network downloads, and write to local configuration files (e.g.,~/.terraformrc). - Sanitization: No sanitization or validation of command output is performed before it influences agent decision-making.
Audit Metadata