terragrunt
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides installation instructions that reference official and well-known sources, including the
terragruntbinary from the official websitehttps://terragrunt.gruntwork.io/and installation via thebrewpackage manager. These are standard and legitimate sources for the infrastructure tool described.\n- [COMMAND_EXECUTION]: The instructions enable the agent to execute standard CLI commands for the tool, such asterragrunt plan,terragrunt apply, andterragrunt run-all. These commands are essential for the skill's stated purpose of managing infrastructure and do not involve unauthorized privilege escalation or persistence mechanisms.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external configuration files (.hcl) which creates an ingestion surface for indirect prompt injection.\n - Ingestion points: The agent is instructed to read local configuration files using functions like
read_terragrunt_config()andfind_in_parent_folders().\n - Boundary markers: No specific boundary markers or instruction-ignoring delimiters are defined for the configuration content in the provided examples.\n
- Capability inventory: The skill utilizes command execution for infrastructure deployment (
terragrunt apply).\n - Sanitization: No explicit sanitization of the configuration file content is mentioned. However, as this is the primary function of an Infrastructure-as-Code expert skill, the risk is assessed as safe within this specific context.
Audit Metadata