terraform-search-import

Pass

Audited by Gen Agent Trust Hub on Mar 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security issues were detected. The skill instructions follow legitimate infrastructure-as-code workflows and use well-known, trusted tools for resource management.- [COMMAND_EXECUTION]: The skill includes bash scripts and instructions to execute local commands (e.g., aws rds, tofu init, tofu plan). These operations are necessary for discovering existing cloud resources and managing infrastructure state as per the skill's primary purpose.- [EXTERNAL_DOWNLOADS]: The helper script list_resources.sh executes terraform init -upgrade, which may download providers from official registries. This is a standard and expected behavior for infrastructure-as-code tools.- [CREDENTIALS_UNSAFE]: No hardcoded credentials or unsafe secret handling practices were found. The skill correctly suggests using variables and .tfvars files for configuration.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 16, 2026, 06:16 PM