terraform-ci

Pass

Audited by Gen Agent Trust Hub on Apr 7, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references an installation script from the official Infracost GitHub repository to enable cloud cost estimation within CI/CD workflows.
  • [REMOTE_CODE_EXECUTION]: Includes an example step that installs the Infracost CLI by piping its official installer script to the shell, which is the standard deployment method provided by the vendor.
  • [COMMAND_EXECUTION]: Contains a comprehensive list of standard Terraform and Pulumi commands for managing infrastructure, state files, and resource imports.
  • [DATA_EXFILTRATION]: Provides configuration for an automated workflow that reads Terraform plan outputs and posts them as comments on GitHub pull requests using official APIs.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 7, 2026, 10:29 AM
Security Audit — agent-trust-hub — terraform-ci