terraform-aws-annotated-reference
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
curlto fetch the latest AWS provider version fromhttps://registry.terraform.io/v1/providers/hashicorp/aws, which is the official well-known repository for Terraform providers. - [COMMAND_EXECUTION]: The workflow executes
terraform initandterraform providers schema -json. Theterraform initcommand downloads the officialhashicorp/awsprovider binary to the local environment. This is standard behavior for the toolchain used in this skill. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data sources, including user-provided resource names, provider versions, and AWS documentation retrieved via MCP tools.
- Ingestion points: User input (resource name, version), Terraform Registry API responses, and AWS documentation tool outputs.
- Boundary markers: Not explicitly defined in the prompt interpolation, but the skill uses strict schema validation (
jq) and format rules (FR-1 through FR-7) to constrain the output. - Capability inventory: The skill can execute shell commands (
Bash), read/write files, and interact with specialized AWS knowledge tools. - Sanitization: Uses
jqto parse and extract structured data from the provider schema, reducing the risk of processing malicious instructions embedded in the schema itself.
Audit Metadata