terraform-azure
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the official HashiCorp GPG signing key from
https://apt.releases.hashicorp.com/gpgto verify the integrity of the Terraform package during installation. - [COMMAND_EXECUTION]: Instructions include standard Azure CLI operations (
az login,az storage account create) and Terraform workflow commands. It demonstrates a secure practice for secret retrieval by using a subshell command to fetch values directly from Azure Key Vault (az keyvault secret show). - [PRIVILEGE_ESCALATION]: The prerequisites section utilizes
sudoto configure the system's package manager and install the Terraform binary, which is the standard procedure for tool installation on Linux environments. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest user-defined inputs for resource naming, environment selection, and credentials. It follows best practices by marking sensitive variables as
sensitive = trueand defining resource boundaries within Azure Virtual Networks and Network Security Groups to mitigate accidental exposure.
Audit Metadata