terraform-iac-data-engineering

Pass

Audited by Gen Agent Trust Hub on Jun 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches Terraform binaries from HashiCorp's official release repository and the AWS CLI from Amazon's official distribution domain.
  • [EXTERNAL_DOWNLOADS]: Clones a sample project repository from GitHub to provide infrastructure templates.
  • [EXTERNAL_DOWNLOADS]: Installs standard Python libraries (pandas, boto3) from the public PyPI registry during resource provisioning.
  • [COMMAND_EXECUTION]: Provides instructions to execute shell commands for software installation and cloud resource management using the Terraform CLI.
  • [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection as it processes external code from a third-party GitHub repository during infrastructure deployment.
  • Ingestion points: SKILL.md (via git clone).
  • Boundary markers: Absent.
  • Capability inventory: terraform init, terraform apply, terraform destroy, and various aws-cli commands.
  • Sanitization: Absent.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 12, 2026, 08:21 PM
Security Audit — agent-trust-hub — terraform-iac-data-engineering