terraform-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational content and best practice recommendations for infrastructure-as-code using Terraform. It promotes security measures such as secret management via AWS Secrets Manager or HashiCorp Vault, state file encryption with KMS, and the use of static analysis security scanning tools like tfsec and Checkov. All external references point to official HashiCorp documentation or well-known, trusted community resources (e.g., Terragrunt, Terratest, and Anton Babenko's pre-commit hooks). The command examples provided (terraform init/plan/apply, go test, tfsec) are standard for infrastructure development and maintenance workflows.
Audit Metadata