Terraform Plan Analyzer

Warn

Audited by Socket on Oct 4, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core purpose is coherent, and official Terraform sources reduce install-trust concerns, but the skill expands beyond HashiCorp into third-party Infracost data flows and an unspecified HCL2 parser dependency. The biggest risk is that sensitive Terraform plan JSON may be sent to Infracost for cost analysis; this is plausible for the feature but should be treated as medium risk due to external data exposure.

Confidence: 88%Severity: 54%
Audit Metadata
Analyzed At
Oct 4, 2026, 09:11 AM
Package URL
pkg:socket/skills-sh/agentskillexchange%2Fskills%2Fterraform-plan-analyzer%2F@415ba9ddfb5d9424d1f2c948c9105c594cf697e4