terraform-engineer
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill workflow involves executing standard infrastructure management commands to validate, plan, and apply configurations.
- Evidence:
SKILL.md(Core Workflow) andreferences/testing.mddescribe the use ofterraform,tflint, andgo test. - [EXTERNAL_DOWNLOADS]: The skill provides instructions for using well-known development tools and libraries from trusted repositories and package registries.
- Evidence:
references/testing.mdreferences official tools liketflint,pre-commit, andterratest(via Gruntwork). - [INDIRECT_PROMPT_INJECTION]: The skill processes infrastructure code files, which presents a surface for indirect prompt injection if the files originate from untrusted sources.
- Ingestion points: User-provided Terraform configuration files analyzed in
SKILL.md. - Boundary markers: Includes instructions for validation and linting steps before execution.
- Capability inventory: Execution of
terraformand related CLI tools. - Sanitization: Relies on Terraform's internal validation mechanisms and static analysis tools like
tflint.
Audit Metadata