terragrunt
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes infrastructure configuration data from local HCL files which influence the execution of high-privilege infrastructure commands.
- Ingestion points: Host and network configuration files (
inventory.hcl,networking.hcl,versions.hcl) are read viaread_terragrunt_configto populate module inputs. - Boundary markers: The instructions explicitly require human approval for all
task tg:applyoperations and mandate manual verification of hardware addresses and IP allocations. - Capability inventory: The skill enables infrastructure provisioning and state modification using
terragruntandtofuthroughtaskcommand wrappers. - Sanitization: Relies on manual human review of generated plans and HCL syntax validation before execution.
- [EXTERNAL_DOWNLOADS]: The skill fetches infrastructure modules and stack definitions from external repositories.
- Evidence: Examples in
references/stacks.mdandreferences/units.mdutilizegit::github.comsources for Terragrunt stacks and modules. This represents standard infrastructure-as-code dependency management using well-known services. - [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands via a task runner to manage infrastructure state and deployment.
- Evidence:
SKILL.mddefines severaltask tg:<command>aliases for validation and deployment. It also provides specific safe patterns for resource state management using bash loops to preserve resource identifiers.
Audit Metadata