terraform-aws
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a shell script (
scripts/tf-init.sh) and standardterraformCLI commands to manage infrastructure resources. This includes initializing directories, creating files, and provisioning AWS resources. - [EXTERNAL_DOWNLOADS]: The skill triggers downloads of Terraform providers and modules from the HashiCorp registry (e.g.,
hashicorp/awsandterraform-aws-modules/vpc/aws). These are well-known and trusted infrastructure sources. - [INDIRECT_PROMPT_INJECTION]: The initialization script processes user-supplied arguments for project names and regions without explicit sanitization, which are then interpolated into generated HCL files and shell commands. * Ingestion points: User-provided arguments in
scripts/tf-init.sh. * Boundary markers: None present to delimit user input from the generated configuration logic. * Capability inventory: File system operations (mkdir,cd,cat) and external binary execution (terraform init). * Sanitization: None detected; the script relies on user-provided strings for file and resource naming.
Audit Metadata