terraform-iac

Warn

Audited by Socket on Mar 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The Terraform guidance itself is benign and aligned, but the companion-check step is out of scope and introduces a third-party transitive skill installation path via an unpinned remote command. No direct credential theft or exfiltration is present, but the install trust chain makes the skill riskier than a normal documentation skill.

Confidence: 89%Severity: 61%
Audit Metadata
Analyzed At
Mar 23, 2026, 01:04 PM
Package URL
pkg:socket/skills-sh/AbsolutelySkilled%2FAbsolutelySkilled%2Fterraform-iac%2F@1cda6a8c70e182246132d3272b538bc108d4e7e2
Security Audit — socket — terraform-iac