generate-terraform-provider
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions include running
speakeasy quickstart,speakeasy run,go build, andgo testto manage the provider lifecycle. These are standard commands for the Speakeasy workflow. - [INDIRECT_PROMPT_INJECTION]: The skill processes OpenAPI specifications which are external data sources.
- Ingestion points: OpenAPI specs referenced in
SKILL.mdandcontent/customization.md. - Boundary markers: No specific delimiters or instructions to ignore embedded content are provided.
- Capability inventory: The skill triggers command execution via
speakeasyandgotools and writes to local configuration files. - Sanitization: There is no evidence of sanitization or filtering of the OpenAPI content before processing.
Audit Metadata