terraform-engineer
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided Terraform configuration files (HCL), creating a surface for indirect prompt injection.
- Ingestion points: Ingests local infrastructure files (.tf, .tfvars) and external modules during execution.
- Boundary markers: No specific boundary markers or instructions to ignore embedded commands are present in the skill instructions.
- Capability inventory: The skill executes shell commands via the Terraform CLI and writes files to the local system (e.g., plan files, graph exports).
- Sanitization: The skill does not describe any sanitization or validation of the input HCL content before interpolation or execution.
Audit Metadata