The Agent Skills Directory

[SAFE]: The skill provides extensive documentation on secure infrastructure-as-code practices.
[EXTERNAL_DOWNLOADS]: The skill correctly identifies and recommends standard, well-known DevOps tools such as tflint, checkov, and trivy. It provides a link to the official installer for Trivy (https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh), which is maintained by Aqua Security.
[CREDENTIALS_UNSAFE]: No hardcoded credentials were found. The skill explicitly warns against storing secrets in variables or state and provides patterns for using cloud-native secret managers (AWS Secrets Manager, etc.) and the write_only argument introduced in Terraform 1.11.
[COMMAND_EXECUTION]: While the skill discusses Terraform provisioners (local-exec and remote-exec), it categorizes them as a "last resort" and provides safer alternatives like user_data and cloud-init, demonstrating a security-first approach.

terraform-skill