modules
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes local CLI tools
terraform(init, fmt, validate) andcoder(templates push, versions list) to manage workspace configurations. - Evidence: The workflow utilizes
terraform init,terraform fmt, andterraform validateto ensure the integrity of the modifiedmain.tffile. - Evidence: The
coder templates pushcommand is used to deploy the updated templates to the Coder platform. - [EXTERNAL_DOWNLOADS]: Infrastructure snippets and documentation are retrieved from the official Coder registry and documentation site.
- Evidence: Fetches Terraform module definitions and README content from
https://registry.coder.comandhttps://coder.com/docs. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data from the module registry which is then used to modify project files, creating a potential surface for indirect instruction injection if upstream sources were compromised.
- Ingestion points: Remote Terraform snippets and README files retrieved from
registry.coder.com. - Boundary markers: The skill requires an explicit user 'yes/no' confirmation after showing the proposed code snippet before any file modification occurs.
- Capability inventory: Possesses capabilities to write to
main.tf, execute shell commands for validation, and push code to the Coder deployment. - Sanitization: No specific sanitization or filtering is applied to the Terraform snippets beyond standard Terraform validation commands.
Audit Metadata