terraform-iac
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill describes workflows involving the execution of Terraform CLI commands. Some examples, such as the
terraform importprocess, involve using user-supplied values (resource types and IDs) as command-line arguments. In an automated agent context, this requires input sanitization to prevent potential command injection. - [DATA_EXFILTRATION]: The advanced patterns include a drift detection script that transmits detection alerts to an external Slack webhook URL. This is a common and legitimate pattern for DevOps alerting.
- [EXTERNAL_DOWNLOADS]: Infrastructure management and CI/CD examples utilize official resources from well-known providers including HashiCorp, AWS, and GitHub for infrastructure deployment and workflows.
Audit Metadata