terraform-operations
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
terraform-mcpserver to execute local shell commands via the Terraform CLI, includingterraform_init,terraform_apply, andterraform_destroy. - [PROMPT_INJECTION]: The skill has an indirect prompt injection attack surface as it ingests and processes local data.
- Ingestion points: Local Terraform configuration files (.tf).
- Boundary markers: No explicit delimiters or warnings to ignore embedded instructions are present.
- Capability inventory: Extensive command execution capabilities including file system modification and infrastructure deployment via Terraform.
- Sanitization: No sanitization or validation of the ingested Terraform file content is mentioned.
Audit Metadata