import-infrastructure-as-code
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches infrastructure mapping CSVs, module READMEs, and Terraform provider/module configurations from official sources including the Azure organization on GitHub and the Terraform Registry.
- [COMMAND_EXECUTION]: The skill utilizes the Azure CLI (
az) for authenticating to the user's subscription and retrieving resource metadata. It also executes Terraform CLI commands (init,validate,plan) to manage Infrastructure as Code workflows. - [DYNAMIC_EXECUTION]: The skill dynamically generates HCL (HashiCorp Configuration Language) files and
importblocks by parsing Azure discovery data and inspecting the source code of downloaded Terraform modules. - [INDIRECT_PROMPT_INJECTION]: The skill has an ingestion surface for external data, including Azure resource properties and README files from GitHub. While this data is processed as part of the code generation workflow, it originates from trusted cloud environments and official documentation sources.
Audit Metadata