iac-executor
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to execute Terraform commands and infrastructure health checks using standard CLI tools such as
curl,pg_isready, andaws. These operations are consistent with the skill's primary purpose of automated deployment and post-deployment verification. - [PROMPT_INJECTION]: The instructions include specific guardrails requiring a verbatim audit string (
AUDIT_RESULT: APPROVED) from a security auditor skill and explicit human confirmation before performing any actions, which serves as an effective defense against unauthorized command execution. - [DATA_EXPOSURE]: The skill processes infrastructure configuration and endpoint details via
terraform outputto perform health checks. This data is handled within the deployment context and reported back to the user, with no indications of unauthorized data exfiltration.
Audit Metadata