iac-attack-surface
Warn
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: MEDIUMDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill instructs the agent to scan and identify sensitive artifacts including
.env,.env.*,*.tfstate, and*.tfvars. This capability enables the agent to access and process environment secrets and infrastructure state files containing sensitive configuration data. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest and analyze untrusted Infrastructure-as-Code manifests (Terraform, Kubernetes, Ansible, Docker). It lacks explicit boundary markers or instructions for the agent to ignore natural language commands that might be embedded within these files, creating a surface for indirect prompt injection attacks.
- Ingestion points: Local files matching patterns for Terraform (
*.tf), Docker (Dockerfile), Kubernetes (*.yaml), Ansible, and cloud-init. - Boundary markers: Absent. The skill does not provide delimiters or specific instructions to treat file contents as data only.
- Capability inventory: The skill performs complex analysis and reporting based on file contents; however, no network exfiltration or shell execution tools are explicitly requested in the provided configuration.
- Sanitization: Absent. There is no evidence of filtering or escaping logic for the ingested content.
Audit Metadata