terraform-policy

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFE
Full Analysis
  • [Data Access Capabilities]: The skill provides instructions for utilizing the core::getresources and core::getdatasource functions. These are native Terraform Policy functions used to query resource state and provider APIs for policy enforcement, which is the primary and intended purpose of the skill.
  • [External Documentation References]: The instructions direct the agent to fetch provider-specific documentation from official sources, such as HashiCorp's GitHub repositories and the AWS Security Hub documentation. These references are used to provide accurate schema information for policy authoring and are retrieved from trusted domains.
  • [Security Guidance for Policy Authors]: The skill includes an extensive 'Common Mistakes to Avoid' section that educates users on avoiding runtime errors, handling null values safely with core::try(), and ensuring complete coverage for security-sensitive resources like IAM policies and Security Groups.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 03:56 PM