oma-tf-infra
Pass
Audited by Gen Agent Trust Hub on May 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill's core rules and execution protocols emphasize secure-by-default infrastructure, including the use of OIDC for CI/CD and the prohibition of hardcoded secrets. It explicitly guides users to use cloud-native secret management services instead of storing sensitive data in code.
- [EXTERNAL_DOWNLOADS]: The skill references official and well-known repositories and services, such as the GitHub Actions OIDC issuer and official HashiCorp Terraform actions, which are trusted industry standards.
- [PROMPT_INJECTION]: While the skill processes user input to generate infrastructure code (representing an indirect prompt injection surface), it mandates verification steps including terraform validate and manual terraform plan reviews to mitigate risks.
Audit Metadata