google-cicd-terraform
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill incorporates security-first protocols, such as requiring manual confirmation before executing terraform apply and recommending against high-risk patterns like hardcoded Service Account keys or authoritative project-wide IAM policies.
- [EXTERNAL_DOWNLOADS]: Fetches provider version metadata from the official Terraform Registry (registry.terraform.io). This is a well-known service and the operation does not involve remote code execution.
- [COMMAND_EXECUTION]: Utilizes standard Terraform CLI commands for infrastructure management. Security risks are mitigated by a mandatory lifecycle that includes plan summarization and explicit user approval steps.
Audit Metadata