terraform-skill
Pass
Audited by Gen Agent Trust Hub on Apr 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides installation commands for standard industry tools (TFLint and Trivy) which fetch scripts from well-known and reputable GitHub organizations (terraform-linters and aquasecurity). These references follow the Trusted External Sources rules and are documented neutrally.
- [SAFE]: Security guidance throughout the skill promotes industry best practices, such as using AWS Secrets Manager for sensitive data, encrypting state files, and implementing least-privilege security groups and IAM policies.
- [SAFE]: No prompt injection or behavior override patterns were detected. The instructions are focused on infrastructure-as-code tasks and align with the agent's intended role.
- [SAFE]: The skill does not contain any obfuscated code, hidden URLs, or suspicious persistence mechanisms across its core files and references.
- [SAFE]: While there is a metadata mismatch between the documented author (Anton Babenko) and the provided context (iliagerman), the content reflects established community best practices and does not present a security risk.
Audit Metadata