terraform-search-import
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill instructions follow legitimate infrastructure-as-code workflows and use well-known, trusted tools for resource management.- [COMMAND_EXECUTION]: The skill includes bash scripts and instructions to execute local commands (e.g.,
aws rds,tofu init,tofu plan). These operations are necessary for discovering existing cloud resources and managing infrastructure state as per the skill's primary purpose.- [EXTERNAL_DOWNLOADS]: The helper scriptlist_resources.shexecutesterraform init -upgrade, which may download providers from official registries. This is a standard and expected behavior for infrastructure-as-code tools.- [CREDENTIALS_UNSAFE]: No hardcoded credentials or unsafe secret handling practices were found. The skill correctly suggests using variables and.tfvarsfiles for configuration.
Audit Metadata