The Agent Skills Directory

[SAFE]: The skill implements a read-only policy checker in scripts/validate-terraform-policy.py that parses Terraform files using regex and a custom lexer to identify security risks without executing the code or making network calls.- [SAFE]: The Python scripts use standard libraries (argparse, ipaddress, json, re) and follow secure coding practices, such as using a lexer to avoid misinterpreting HCL braces within comments or strings.- [SAFE]: Command execution detected in scripts/test_validate_terraform_policy.py is restricted to running the local validator script against hardcoded test fixtures for verification purposes.- [SAFE]: No hardcoded credentials, sensitive file access, or network exfiltration patterns were found within the skill's instructions or logic.

tf-best-practices