terraform-review

Pass

Audited by Gen Agent Trust Hub on Apr 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses a restricted set of tools (Read, Glob, Grep) to perform static analysis of Terraform files. It does not execute code, make network requests, or access sensitive system files.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from pull requests which could theoretically contain malicious instructions designed to influence the review verdict.
  • Ingestion points: Processes any .tf files discovered via Glob and Read in the local repository.
  • Boundary markers: None specified to differentiate code from instructions during processing.
  • Capability inventory: Limited to Read, Glob, and Grep tools; no code execution or network access capabilities are granted.
  • Sanitization: No explicit sanitization of file content is performed before analysis.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 9, 2026, 01:06 PM