terra-recon
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted external data (Terraform files), making it vulnerable to indirect prompt injection where malicious instructions hidden in code comments or metadata could influence agent behavior.
- Ingestion points: Step 1 instructions involve reading local Terraform files using Read, Glob, and Grep tools.
- Boundary markers: The instructions do not specify the use of delimiters or warnings to ignore instructions embedded within the files being audited.
- Capability inventory: The skill is configured with powerful tools including Bash, Write, and WebFetch, which could be abused if an injection is successful.
- Sanitization: There are no instructions for sanitizing or validating the content of the files before processing.
Audit Metadata