iac-scan-tfsec
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Recommends installing the
tfsectool from the official Aqua Security GitHub repository (github.com/aquasecurity/tfsec). This is a well-known and trusted source for security tooling. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external Terraform (HCL) files which are considered untrusted data.
- Ingestion points: Reads files from the specified
<terraform-dir>via thetfsecCLI. - Boundary markers: Not explicitly defined in the prompt instructions for the agent.
- Capability inventory: Uses shell command execution to run
tfsecortrivyand redirects output to a JSON file. - Sanitization: No specific sanitization or validation of the HCL content is mentioned, which is typical for static analysis tools.
Audit Metadata