terraform-azure

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads the official HashiCorp GPG signing key from https://apt.releases.hashicorp.com/gpg to verify the integrity of the Terraform package during installation.
  • [COMMAND_EXECUTION]: Instructions include standard Azure CLI operations (az login, az storage account create) and Terraform workflow commands. It demonstrates a secure practice for secret retrieval by using a subshell command to fetch values directly from Azure Key Vault (az keyvault secret show).
  • [PRIVILEGE_ESCALATION]: The prerequisites section utilizes sudo to configure the system's package manager and install the Terraform binary, which is the standard procedure for tool installation on Linux environments.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest user-defined inputs for resource naming, environment selection, and credentials. It follows best practices by marking sensitive variables as sensitive = true and defining resource boundaries within Azure Virtual Networks and Network Security Groups to mitigate accidental exposure.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 01:16 AM