terraform-skill

Pass

Audited by Gen Agent Trust Hub on Jul 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides comprehensive security best practices, including guidance on avoiding secrets in state, implementing least-privilege IAM policies, and enforcing encryption for cloud resources.
  • [SAFE]: Implements a 'Response Contract' that forces the agent to perform risk assessments and identify failure modes before providing solutions.
  • [SAFE]: Includes 'LLM Mistake Checklists' across various topics (CI/CD, modules, security, state management) designed to prevent the AI from generating common insecure or incorrect Terraform patterns.
  • [SAFE]: Recommends the use of industry-standard security and compliance tools such as Trivy, Checkov, and Open Policy Agent (OPA).
  • [SAFE]: Provides secure CI/CD workflow templates emphasizing environment protection, approval gates, and OIDC-based authentication to avoid long-lived credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 14, 2026, 11:00 AM
Security Audit — agent-trust-hub — terraform-skill