alibabacloud-terraform-code-generation
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads resource schemas and documentation from the official Alibaba Cloud GitHub repository during the code generation process.
- [COMMAND_EXECUTION]: Executes
terraformcommands (fmt,init,validate,plan) and shell utilities (grep,awk) to audit and validate generated HCL. - [INDIRECT_PROMPT_INJECTION]: Vulnerability surface detected:
- Ingestion points: User requirements (SKILL.md Step 1) and external provider documentation fetched via WebFetch (SKILL.md Step 4.2).
- Boundary markers: Absent for interpolated external documentation content.
- Capability inventory: File system write access, directory creation, and execution of Terraform validation/planning commands.
- Sanitization: No explicit sanitization of fetched documentation content before interpolation into prompts.
- [REMOTE_CODE_EXECUTION]: Includes maintenance scripts (
scripts/build_alicloud_providers.py,scripts/build_deprecated_fields.py) that executegit cloneandgit pullcommands against the vendor's official GitHub repository to refresh local reference data.
Audit Metadata