terraform-engineer
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a professional reference guide for Terraform engineering, providing standard HCL templates and best practices without any malicious intent.
- [SAFE]: Security-critical areas like secret management are handled correctly; the instructions explicitly warn against hardcoding secrets and demonstrate the proper use of the
sensitivevariable flag and AWS Secrets Manager. - [SAFE]: External tool references, such as TFLint, Terratest, and Pre-commit, are standard industry tools for infrastructure development. Installations mentioned (e.g.,
brew install tflint,pip install pre-commit) are instructional examples for local environment setup. - [SAFE]: Provider and module references target official and well-known sources (HashiCorp Registry, official GitHub repositories), posing no supply chain risks.
Audit Metadata