terraform-service-scaffold
Warn
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install
git-secret-protectorviapip installand embeds this command into the generated.github/workflows/terraform.ymlCI/CD pipeline. This package is an unverified dependency from a third-party source rather than a trusted organization. - [INDIRECT_PROMPT_INJECTION]: The skill interpolates user-provided strings (such as the service and project names) into generated file paths, HCL configurations, and shell scripts within the CI/CD workflow, creating a surface for command or path injection.
- Ingestion points: User input for service and project names gathered during the requirement phase.
- Boundary markers: No delimiters or warnings to ignore embedded instructions are present in the generated output files.
- Capability inventory: The generated CI/CD workflow executes shell commands (
terraform init,terraform plan,git-secret-protector reveal) using the interpolated variables. - Sanitization: No sanitization or validation logic is provided to ensure user-supplied names do not contain shell metacharacters or path traversal sequences.
Audit Metadata