terraform
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [SAFE]: The skill provides high-quality HCL patterns and operational guidance. It explicitly mandates security checks and secret protection as part of its core response contract and includes detailed checklists to prevent common AI hallucinations or security mistakes.
- [EXTERNAL_DOWNLOADS]: The skill references official installation scripts and repositories for well-known DevOps and security tools, including Trivy, Checkov, TFLint, and terraform-ls. These sources are established industry standards.
- [COMMAND_EXECUTION]: The skill utilizes standard Terraform, OpenTofu, and git commands to manage infrastructure and code intelligence. These operations are within the expected scope for an infrastructure management assistant.
- [REMOTE_CODE_EXECUTION]: Provides instructions for installing tools like Trivy using piped shell execution (curl to bash). These instructions target trusted organizations and are intended for the user to set up their local development environment rather than silent execution by the agent.
Audit Metadata