terraform-cli-setup
Warn
Audited by Socket on Oct 9, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core purpose and most capabilities are coherent for a Terraform setup skill, and the primary install sources are official HashiCorp channels. However, the skill auto-installs software and rewrites global Terraform config without user confirmation, skips checksum/signature verification on manual binary installs, and may redirect provider downloads to third-party mirrors. These are medium-risk trust and integrity issues rather than confirmed malware.
Confidence: 88%Severity: 53%
Audit Metadata