terraform-policy
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFE
Full Analysis
- [Data Access Capabilities]: The skill provides instructions for utilizing the
core::getresourcesandcore::getdatasourcefunctions. These are native Terraform Policy functions used to query resource state and provider APIs for policy enforcement, which is the primary and intended purpose of the skill. - [External Documentation References]: The instructions direct the agent to fetch provider-specific documentation from official sources, such as HashiCorp's GitHub repositories and the AWS Security Hub documentation. These references are used to provide accurate schema information for policy authoring and are retrieved from trusted domains.
- [Security Guidance for Policy Authors]: The skill includes an extensive 'Common Mistakes to Avoid' section that educates users on avoiding runtime errors, handling null values safely with
core::try(), and ensuring complete coverage for security-sensitive resources like IAM policies and Security Groups.
Audit Metadata