terraform-style-guide
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is purely instructional and provides guidelines for generating Terraform code following HashiCorp's official style and security conventions.
- [DATA_EXPOSURE]: The skill explicitly instructs against hardcoding credentials and provides patterns for using
sensitive = trueandephemeralresources to protect sensitive data from being stored in Terraform state files. - [REMOTE_CODE_EXECUTION]: There are no remote code execution patterns. References to Terraform providers (e.g.,
hashicorp/aws) are standard for infrastructure-as-code and do not involve untrusted script execution. - [PROMPT_INJECTION]: No evidence of prompt injection, role-play overrides, or instructions to bypass safety filters was found.
- [INDIRECT_PROMPT_INJECTION]: While the skill guides the agent in processing user requests for infrastructure, it does not ingest untrusted data in a way that executes commands or performs network operations. It functions as a safe set of formatting and security rules.
Audit Metadata