tfctl
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Command Execution: The skill executes commands using the
tfctlCLI, which is the intended purpose of the extension for interacting with Terraform Cloud and Enterprise. This is standard operational behavior for this type of tool. - Authorization and Privilege Management: The skill includes explicit instructions for handling resource deletions through a human-in-the-loop process. It correctly instructs the agent not to self-authorize destructive actions, relying instead on session-based grants managed by the human user via
tfctl harness exec. - Data Handling: It enforces the use of built-in processing flags (
--jq) rather than piping data to external utilities, which helps maintain execution within the controlled environment of thetfctlbinary. - Resource Access Logic: The skill provides specific guidance on correct API path shapes and error handling (e.g., stopping when a resource is not found), which reduces the risk of accidental information gathering or unauthorized exploration of the organizational environment.
Audit Metadata