terraform-iac

Pass

Audited by Gen Agent Trust Hub on Jun 26, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill describes workflows involving the execution of Terraform CLI commands. Some examples, such as the terraform import process, involve using user-supplied values (resource types and IDs) as command-line arguments. In an automated agent context, this requires input sanitization to prevent potential command injection.
  • [DATA_EXFILTRATION]: The advanced patterns include a drift detection script that transmits detection alerts to an external Slack webhook URL. This is a common and legitimate pattern for DevOps alerting.
  • [EXTERNAL_DOWNLOADS]: Infrastructure management and CI/CD examples utilize official resources from well-known providers including HashiCorp, AWS, and GitHub for infrastructure deployment and workflows.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 26, 2026, 09:14 PM
Security Audit — agent-trust-hub — terraform-iac