Terraform Plan Analyzer
Warn
Audited by Socket on Oct 4, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core purpose is coherent, and official Terraform sources reduce install-trust concerns, but the skill expands beyond HashiCorp into third-party Infracost data flows and an unspecified HCL2 parser dependency. The biggest risk is that sensitive Terraform plan JSON may be sent to Infracost for cost analysis; this is plausible for the feature but should be treated as medium risk due to external data exposure.
Confidence: 88%Severity: 54%
Audit Metadata