terraform-engineer

Pass

Audited by Gen Agent Trust Hub on May 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides structured guidance and templates for implementing infrastructure as code using Terraform. It includes extensive documentation on security best practices, such as using sensitive variable flags, encrypting state files, and implementing least-privilege IAM policies.- [CREDENTIALS_UNSAFE]: While the skill references sensitive file paths like '~/.aws/credentials' and 'service-account-key.json', these are used strictly for educational purposes to demonstrate standard provider authentication methods. There are no instructions for the agent to exfiltrate or improperly expose these files.- [EXTERNAL_DOWNLOADS]: The skill references several well-known and reputable third-party tools and libraries for testing and linting, including TFLint, Terratest, and pre-commit hooks. These references are part of a standard development workflow and do not represent a security risk.- [REMOTE_CODE_EXECUTION]: Instructions for running tests using 'go test' or linters like 'tflint' and 'checkov' are provided as part of a documented CI/CD and testing strategy. These commands are intended to be executed in a controlled environment by the user or within an automated pipeline.
Audit Metadata
Risk Level
SAFE
Analyzed
May 12, 2026, 06:52 AM
Security Audit — agent-trust-hub — terraform-engineer