terraform
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to process and interpret external data sources, specifically Terraform plan files and CI annotations, which represents a potential injection surface.
- Ingestion points: Terraform plan JSON files processed by the Python script in
gpt.md, and plan screenshots/CI output interpreted ingemini.md. - Boundary markers: The skill includes mandatory directives for human review before applying changes and specific warnings about blast radius classification.
- Capability inventory: The skill uses the
terraformCLI to perform infrastructure changes (terraform applyinSKILL.md). - Sanitization: The provided Python script implements a safety gate to detect and block 'delete' actions on protected resource types.
- [EXTERNAL_DOWNLOADS]: The skill references external resources and community tools for infrastructure management.
- Fetches documentation and best practices from HashiCorp's official developer portal.
- References community-maintained resources such as
terraform-gotchasand thetfautomvutility on GitHub for refactoring guidance.
Audit Metadata