terraform-engineer

Pass

Audited by Gen Agent Trust Hub on Mar 27, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides comprehensive and secure guidance for infrastructure-as-code development. It includes mandatory constraints that prevent common security pitfalls, such as storing secrets in plain text or using unencrypted local state.
  • [DATA_EXPOSURE]: The documentation references standard sensitive file paths (e.g., ~/.aws/credentials, service-account-key.json) strictly within the context of legitimate cloud provider configuration examples. These are standard Terraform patterns and the skill provides associated warnings regarding production security.
  • [EXTERNAL_DOWNLOADS]: The skill recommends well-known, reputable developer tools and libraries for testing and linting, including TFLint, Open Policy Agent (OPA), Checkov, and Terratest. These references point to official or highly recognized repositories and do not involve untrusted or obfuscated download patterns.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 27, 2026, 07:23 AM