alibabacloud-terraform-codegen
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches authoritative resource documentation and repository data from Alibaba Cloud's official GitHub organization (
github.com/aliyunandraw.githubusercontent.com/aliyun). These references are used to ensure accuracy in the generated Terraform HCL. - [COMMAND_EXECUTION]: Employs standard shell utilities such as
mkdir,ls,grep, andawkto manage the project workspace and perform static analysis on generated files. This includes a bash-based audit loop to detect and replace deprecated Terraform fields before validation. - [DATA_EXPOSURE]: Contains logic to verify the availability of authentication mechanisms (like environment variables and local config files). It includes explicit instructions ('Hard rules') to never read, print, or store actual credential values, aligning with secure development practices.
- [REMOTE_CODE_EXECUTION]: Includes Python scripts used for maintaining local reference catalogs. These scripts utilize
subprocessto executegitcommands against the vendor's trusted repository. These operations are scoped to documentation management and do not involve untrusted inputs.
Audit Metadata