code-review-iac
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference for security auditing of Infrastructure-as-Code (IaC). It promotes best practices such as using secret managers, enabling encryption, and following CIS benchmarks. The suggested tools (checkov, tfsec, terrascan, kics, ripgrep) are standard utilities for static analysis and do not pose an inherent security risk in this context. No evidence of prompt injection, data exfiltration, or malicious persistence was found.
Audit Metadata