terraform-engineer

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill workflow involves executing standard infrastructure management commands to validate, plan, and apply configurations.
  • Evidence: SKILL.md (Core Workflow) and references/testing.md describe the use of terraform, tflint, and go test.
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions for using well-known development tools and libraries from trusted repositories and package registries.
  • Evidence: references/testing.md references official tools like tflint, pre-commit, and terratest (via Gruntwork).
  • [INDIRECT_PROMPT_INJECTION]: The skill processes infrastructure code files, which presents a surface for indirect prompt injection if the files originate from untrusted sources.
  • Ingestion points: User-provided Terraform configuration files analyzed in SKILL.md.
  • Boundary markers: Includes instructions for validation and linting steps before execution.
  • Capability inventory: Execution of terraform and related CLI tools.
  • Sanitization: Relies on Terraform's internal validation mechanisms and static analysis tools like tflint.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 09:45 AM