terraform
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive guidelines for infrastructure-as-code development, specifically focusing on Terraform. It promotes security best practices such as least-privilege IAM roles, encryption at rest, and prohibiting hardcoded secrets in version control.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and generate infrastructure code based on user-provided project context. While it ingests external data (Terraform files and modules), it includes mandatory safety steps like
terraform validateandterraform planreviews to ensure the agent's output is verified by a human operator before execution. - [COMMAND_EXECUTION]: The skill mentions standard Terraform CLI operations (
fmt,validate,plan,apply) and security scanners (checkov,tfsec,trivy). These are standard industry tools for the stated purpose, and the skill does not include any unauthorized or hidden command execution patterns.
Audit Metadata