The Agent Skills Directory

[DATA_EXFILTRATION]: The skill provides instructions to access the sensitive local configuration file at ~/.terraform.d/credentials.tfrc.json to retrieve API tokens for authentication. This is standard behavior for the official Terraform Cloud CLI and API interactions.
[DATA_EXFILTRATION]: The workflow performs network requests to https://app.terraform.io/api/v2/, which is the official endpoint for HCP Terraform. This is required for the skill's primary purpose of remote state and execution management.
[COMMAND_EXECUTION]: The skill utilizes standard system utilities including terraform, curl, and jq to execute infrastructure commands and process structured API responses.
[PROMPT_INJECTION]: The skill ingests external data from the Terraform Cloud API via curl and jq, creating an indirect prompt injection surface. The risk is mitigated by the skill's use of structured JSON parsing with jq to handle the external output.

hcp-terraform