materialize-terraform-provider
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security concerns were identified during the analysis. The skill's content is consistent with its stated purpose of providing technical guidance for the Materialize Terraform provider.
- [EXTERNAL_DOWNLOADS]: The skill references documentation and source code hosted on GitHub and the Terraform Registry. These URLs (e.g., github.com/MaterializeInc, registry.terraform.io) belong to the official vendor and well-known, trusted services.
- [CREDENTIALS_UNSAFE]: While the skill discusses provider authentication, it demonstrates secure practices by using HCL variables and environment variables instead of hardcoding secrets. It explicitly recommends the use of 'materialize_secret' and the write-only ('_wo') arguments available in Terraform 1.11+ to prevent sensitive values from being stored in the terraform.tfstate file.
- [COMMAND_EXECUTION]: The skill includes examples of standard Terraform CLI commands like 'terraform import' and 'terraform providers schema'. These are routine operations for managing infrastructure and do not involve suspicious or arbitrary shell execution.
Audit Metadata