Terraform Plan Validator
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill involves processing output generated by the Terraform CLI. This creates a potential surface where untrusted data (infrastructure plans) could be ingested into the agent context. However, this is the primary intended function of the skill and no specific malicious injection patterns were found.
- Ingestion points: Terraform plan JSON output processed via
terraform show -json(SKILL.md). - Boundary markers: None specified in the documentation.
- Capability inventory: The skill uses the Terraform CLI to read and parse infrastructure state.
- Sanitization: No specific sanitization or filtering of the plan data is described.
- [EXTERNAL_DOWNLOADS]: The skill references and links to official Hashicorp documentation and source code on GitHub. These are well-known and established resources used to provide necessary context for the agent.
Audit Metadata