terraform-operations

Pass

Audited by Gen Agent Trust Hub on May 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the terraform-mcp server to execute local shell commands via the Terraform CLI, including terraform_init, terraform_apply, and terraform_destroy.
  • [PROMPT_INJECTION]: The skill has an indirect prompt injection attack surface as it ingests and processes local data.
  • Ingestion points: Local Terraform configuration files (.tf).
  • Boundary markers: No explicit delimiters or warnings to ignore embedded instructions are present.
  • Capability inventory: Extensive command execution capabilities including file system modification and infrastructure deployment via Terraform.
  • Sanitization: No sanitization or validation of the ingested Terraform file content is mentioned.
Audit Metadata
Risk Level
SAFE
Analyzed
May 18, 2026, 04:20 PM
Security Audit — agent-trust-hub — terraform-operations