terraform-data-infrastructure
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill serves as a technical guide for infrastructure-as-code and does not contain any malicious instructions, prompt injections, or obfuscated code designed to evade detection.
- [EXTERNAL_DOWNLOADS]: The skill references official GitHub Actions from trusted organizations (GitHub, AWS, HashiCorp) and well-known Helm chart repositories (Apache Airflow). These downloads are standard for the stated DevOps use-case and originate from verified sources.
- [COMMAND_EXECUTION]: Shell commands provided are restricted to standard AWS CLI operations for bootstrapping infrastructure and routine CI/CD pipeline steps. These are transparently documented and consistent with legitimate administrative tasks.
- [CREDENTIALS_UNSAFE]: The skill demonstrates a strong security posture by utilizing placeholders for account IDs and implementing Terraform's
sensitive = trueattribute. It explicitly warns against hardcoding secrets and promotes the use of environment variables and secrets managers.
Audit Metadata