terraform-module-testing
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides instructional content and reference examples for Terraform module testing. No malicious instructions, hidden commands, or unauthorized data access patterns were identified across any of the files.
- [EXTERNAL_DOWNLOADS]: The CI/CD integration examples in
references/CI_CD.mddescribe setting up Terraform using official, well-known GitHub Actions from Hashicorp and standard container images. These are documented neutrally as best-practice configurations for testing environments. - [INDIRECT_PROMPT_INJECTION]: The skill's purpose involves processing and testing user-provided Terraform configuration files, which presents a surface for indirect prompt injection from untrusted infrastructure code.
- Ingestion points: The agent is instructed to read and evaluate Terraform resource files (
.tf) and test definition files (.tftest.hcl) provided by the user. - Boundary markers: There are no explicit instructions for using delimiters or boundary markers when reading these external files.
- Capability inventory: The skill enables the use of
terraform test, which has the capability to perform resource planning (plan mode) and create real infrastructure (apply mode). - Sanitization: No specific sanitization or filtering of the HCL content is described beyond standard Terraform CLI execution.
Audit Metadata