terraform-skill
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a purely instructional guide for infrastructure-as-code (IaC) using Terraform and OpenTofu. It provides directory structures, naming conventions, and testing frameworks without including any executable scripts or binary files.
- [SAFE]: The skill actively encourages security best practices, such as using secret management services (AWS Secrets Manager, Parameter Store), enabling encryption, and implementing least-privilege security groups.
- [SAFE]: It recommends the use of established security scanning tools like Trivy and Checkov for static analysis, which enhances the security posture of the infrastructure code being developed.
- [SAFE]: No evidence of prompt injection, data exfiltration, obfuscation, or unauthorized command execution was found in the documentation or the HCL code snippets provided.
Audit Metadata