iac-executor

Pass

Audited by Gen Agent Trust Hub on Jul 10, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill is designed to execute Terraform commands and infrastructure health checks using standard CLI tools such as curl, pg_isready, and aws. These operations are consistent with the skill's primary purpose of automated deployment and post-deployment verification.
  • [PROMPT_INJECTION]: The instructions include specific guardrails requiring a verbatim audit string (AUDIT_RESULT: APPROVED) from a security auditor skill and explicit human confirmation before performing any actions, which serves as an effective defense against unauthorized command execution.
  • [DATA_EXPOSURE]: The skill processes infrastructure configuration and endpoint details via terraform output to perform health checks. This data is handled within the deployment context and reported back to the user, with no indications of unauthorized data exfiltration.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 10, 2026, 10:43 AM
Security Audit — agent-trust-hub — iac-executor