terraform-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes examples of CI/CD workflows that utilize official GitHub Actions from well-known security and infrastructure organizations, such as Aqua Security for tfsec, Bridgecrew for Checkov, and Infracost for cost estimation.
- [EXTERNAL_DOWNLOADS]: The documentation provides instructions for installing the tflint tool using a shell script sourced from the official terraform-linters GitHub repository, which is a widely recognized service in the Terraform community.
- [SAFE]: The skill promotes extensive security best practices, including mandatory rules against hardcoding secrets, requirements for least-privilege IAM policies, and instructions for preventing sensitive data exposure in Terraform state and outputs.
Audit Metadata