terraform-policy

Pass

Audited by Gen Agent Trust Hub on Jul 17, 2026

Risk Level: SAFE
Full Analysis
  • Standard Tool Integration: The skill provides commands for adding specialized sub-skills to the agent environment using the platform's standard package manager (npx skills add).
  • Trusted Documentation References: The instructions guide the agent to fetch provider schema information from HashiCorp's official GitHub repositories. These references are used to ensure that generated policies match the expected resource structures.
  • Robust Safety Patterns: The skill mandates the use of specific HCL patterns, such as core::try for null safety and two-step normalization for optional attributes. These patterns are designed to prevent runtime errors and ensure that generated policies handle missing or null data correctly.
  • Comprehensive Testing Requirements: The tfpolicy-test component enforces a mandatory edge-case checklist, requiring tests for missing attributes, empty collections, and boundary values. This promotes the creation of resilient and well-verified policy code.
  • Sentinel Migration Logic: The skill provides detailed mapping for converting Sentinel constructs to Terraform Policy equivalents, including explicit quality labels and identification of non-convertible patterns, which helps maintain enforcement integrity during migration.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 17, 2026, 02:52 AM
Security Audit — agent-trust-hub — terraform-policy