The Agent Skills Directory

[SAFE]: The skill promotes several security best practices for Infrastructure as Code (IaC):
Credential Management: It explicitly warns against committing AWS access keys and recommends using OpenID Connect (OIDC) or AWS IAM roles for authentication.
Least Privilege: Instructions direct the agent to write least-privilege IAM policies and avoid using administrative wildcards (*) in production.
State Security: It recommends using S3 remote state with encryption and native lockfile support to prevent state corruption.
Change Control: It enforces a workflow where terraform plan artifacts must be reviewed before execution of terraform apply.
[EXTERNAL_DOWNLOADS]: The skill references documentation from trusted sources including HashiCorp (developer.hashicorp.com), Amazon Web Services (docs.aws.amazon.com), and community knowledge bases (stackoverflow.com). These references are for educational purposes and do not involve untrusted code execution.
[INDIRECT_PROMPT_INJECTION]: While the skill is designed to process and diagnose Terraform plan/apply logs and HCL files (which are external data sources), it maintains a low risk by focusing on diagnostic interpretation and following established DevOps workflows with human-in-the-loop checkpoints.

terraform-aws