opentofu
Pass
Audited by Gen Agent Trust Hub on Apr 11, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill includes instructions to download and execute an installation script directly from the official OpenTofu domain using the command
curl -fsSL https://get.opentofu.org/install-opentofu.sh | sh. - [COMMAND_EXECUTION]: Documentation provides numerous examples of shell commands for infrastructure management, including initialization, planning, and applying configurations using the
tofuCLI. - [EXTERNAL_DOWNLOADS]: The skill references external resources for installation across different platforms, specifically fetching scripts from
get.opentofu.org, packages via Homebrew, and container images from the GitHub Container Registry (ghcr.io).
Audit Metadata